CVE-2023-4724 (published 2023-12-18T20:08:04.057Z)
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server
Affected products: Vendor: Unknown
Product: Export any WordPress data to XML/CSV
Versions: 0