CVE-2023-5886 | BDVDB-2026-219795 Detail

Description#

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwanted actions leading to PHAR deserialization, which may lead to remote code execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-12-18Record published in the CVE List.
2. Version 22024-08-02Most recent update recorded in the CVE List.