CVE-2016-11000 Export WordPress Data with Advanced Filters < 1.2 - SQL Injection
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wp-ultimate-exporter(WordPress) | < 1.2 | 1.2 |
| Smackcoders Inc. ultimate exporter | <= 1.1 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- seclists.org exploit mailing-list third-party-advisory
- wordpress.org product third-party-advisory