WordPress · Export Any Wordpress Data To Xml/Csv · CVE-2023-5882
**Name of the Vulnerable Software and Affected Versions**
Export any WordPress data to XML/CSV WordPress plugin versions prior to 1.4.0
WP All Export Pro WordPress plugin versions prior to 1.8.6
**Description**
The issue allows attackers to make logged-in users perform unwanted actions, leading to remote code execution. This is due to the plugins not checking nonce tokens early enough in the request lifecycle.
**Recommendations**
For Export any WordPress data to XML/CSV WordPress plugin versions prior to 1.4.0, update to version 1.4.0 or later.
For WP All Export Pro WordPress plugin versions prior to 1.8.6, update to version 1.8.6 or later.