CVE-2022-0914

The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbitrary CSV file, which the attacker can then download and retrieve the list of titles for example

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.65% chance of exploitation in the next 30 days, 48th percentile

Published

2022-04-11

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/c328be28-75dd-43db-a5b9-c1ba0636c930

References

• CVE Record
• NVD entry

Related

• CVE-2022-0913
• CVE-2022-0918
• CVE-2022-0912
• CVE-2022-0919
• CVE-2022-0911
• CVE-2022-0920