PT-2022-13522 · WordPress · Export All Urls

Asif Nawaz Minhas · Published 2022-04-11 · Updated 2022-04-15 · CVE-2022-0914

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Export All URLs WordPress plugin versions prior to 4.3

Description The issue allows attackers to make a logged-in admin export all posts and pages, including private and draft ones, into an arbitrary CSV file. This could enable the attacker to download and retrieve the list of titles, for example.

Recommendations For Export All URLs WordPress plugin versions prior to 4.3, update to version 4.3 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-0914

Affected Products

Export All Urls

References · 3

• 🔥 https://wpscan.com/vulnerability/c328be28-75dd-43db-a5b9-c1ba0636c930 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0914 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0914 · Vendor Advisory