Vjinfotech Wp Import Export Lite — known CVE vulnerabilities

Every CVE whose affected-product data names Vjinfotech Wp Import Export Lite, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-0236 — CVSS 7.5 (high): The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a…
• CVE-2025-5061 — CVSS 7.5 (high): The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
• CVE-2025-6207 — CVSS 7.5 (high): The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
• CVE-2025-2839 — CVSS 6.4 (medium): The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ function in all…
• CVE-2024-31308 — CVSS 4.4 (medium): Deserialization of Untrusted Data vulnerability in VJInfotech WP Import Export Lite.This issue affects WP Import Export Lite: from n/a…