CVE-2026-5335 — Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure

CVE-2026-5335

Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure PUBLISHED

Description (CNA)

The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possible for any visitors to leak sensitive user information.

Affected (CNA)

Vendor / product	Versions
Unknown / Magic Export & Import	affected 0 before 1.2.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/ed6f00de-bbae-4e89-9d0e-ded0d70e781c/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.