Export to Text <= 2.4 - Unauthenticated Post Export
high
The Export to Text plugin for WordPress is vulnerable to unauthenticated post exporting due to a missing capability check on the sre2t_ajax() AJAX function and the export_to_text_download() function hooked via wp_loaded in versions up to, and including 2.4. This makes it possible for attackers to retrieve potentially s...
- CVSS:
- 7.5
- Affected:
- up to 2.4
- Fix:
- No patched version reported
- Disclosed:
- Jun 15, 2022
Export to Text [export-to-text] <= 2.4 (unfixed + closed)
unknown
The Export to Text plugin for WordPress is vulnerable to unauthenticated post exporting due to a missing capability check on the sre2t_ajax() AJAX function and the export_to_text_download() function hooked via wp_loaded in versions up to, and including 2.4. This makes it possible for attackers to retrieve potentially s...
- Affected:
- up to 2.4
- Fix:
- No patched version reported
- Disclosed:
- Jun 15, 2022
Export to Text [export-to-text] < 2.3 (closed)
unknown
This plugin is prone to a remote file inclusion vulnerability.
Upgrade the plugin.
- Affected:
- up to 2.3
- Fixed in:
- 2.3
- Disclosed:
- May 15, 2015
Export to Text [export-to-text] < 2.3 (closed)
unknown
The Export to Text WordPress plugin was affected by a Remote File Inclusion security vulnerability.
- Affected:
- up to 2.3
- Fixed in:
- 2.3
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database