VYPR

ExportFeed

by WordPress

CVEs (1)

  • CVE-2021-4208HigFeb 21, 2022
    risk 0.47cvss 7.2epss 0.01

    The ExportFeed WordPress plugin through 2.0.1.0 does not sanitise and escape the product_id POST parameter before using it in a SQL statement, leading to a SQL injection vulnerability exploitable by high privilege users