Description
WordPress Plugin WP ALL Export Pro is prone to multiple vulnerabilities, including SQL injection and arbitrary code execution vulnerabilities. Exploiting these issues could allow an attacker to access or modify data, to execute arbitrary commands with the privileges of the user running the application, to compromise the application or the underlying database, or to compromise a vulnerable system. WordPress Plugin WP ALL Export Pro version 1.7.8 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin until a fix is available
References
Related Vulnerabilities
MySQL CVE-2021-35597 Vulnerability (CVE-2021-35597)
WordPress Plugin BuddyPress Multiple Cross-Site Request Forgery Vulnerabilities (2.8.1)
TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2019-19849)
WordPress Plugin Campaign Press Cross-Site Scripting (1.0.5)
WordPress Plugin Gutenberg Template Library & Redux Framework Cross-Site Request Forgery (4.1.20)