WordPress plugin
WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium3
- Low1
All WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Low3.7 | Unauthenticated Sensitive Information Exposure via PHP Type Juggling ≤1.4.14Update to 1.4.15 | CVE-2026-1582 | |
| Medium6.4 | Authenticated (Admin+) Remote Code Execution <1.4.1Update to 1.4.1 | CVE-2023-4724 | |
| High8.8 | Cross-Site Request Forgery to Remote Code Execution <1.4.1Update to 1.4.1 | CVE-2023-5882 | |
| High8.8 | Cross-Site Request Forgery to PHAR Deserialization <1.4.1Update to 1.4.1 | CVE-2023-5886 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.3.5Update to 1.3.6 | — | |
| Critical9.0 | Authenticated SQL Injection ≤1.3.4Update to 1.3.5 | CVE-2022-1800 | |
| Medium4.8 | Admin+ Stored Cross-Site Scripting <1.3.1Update to 1.3.1 | CVE-2021-24708 |
- Low3.7Unauthenticated Sensitive Information Exposure via PHP Type Juggling
≤1.4.14Update to 1.4.15
- Medium6.4Authenticated (Admin+) Remote Code Execution
<1.4.1Update to 1.4.1
- High8.8Cross-Site Request Forgery to Remote Code Execution
<1.4.1Update to 1.4.1
- High8.8Cross-Site Request Forgery to PHAR Deserialization
<1.4.1Update to 1.4.1
- Medium6.1Reflected Cross-Site Scripting
≤1.3.5Update to 1.3.6
- Critical9.0Authenticated SQL Injection
≤1.3.4Update to 1.3.5
- Medium4.8Admin+ Stored Cross-Site Scripting
<1.3.1Update to 1.3.1
WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel: common questions
Does WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel: 1 critical, 2 high, 3 medium, 1 low. None are known to affect version null.
How do I check which version of WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel vulnerability?
CVE-2026-1582, published Feb 17, 2026: WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling. Severity: Low (CVSS 3.7).
Is any WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel vulnerability listed in CISA KEV?
No. None of the known WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel vulnerabilities is currently listed in the CISA KEV catalog.