VYPR

Export User Data

by WordPress

CVEs (1)

  • CVE-2026-12240Jun 30, 2026
    risk 0.00cvss epss 0.00

    The Export User Data plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unserialize function in all versions up to, and including, 2.2.6. This makes it possible for authenticated attackers, with subscriber-level access…