WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE

2023-11-2100:00:00

Unlock Security

wp all export

admin

rce

vulnerability

free < 1.4.0

pro < 1.8.6

remote code execution

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

19.3%

JSON

Description The plugin does not validate and sanitise the wp_query parameter which allows an attacker to run arbitrary command on the remote server

1. Go to "All Export" > "New Export"
2. Select "WP Query Results" as the export type
3. Enter the payload `phpinfo()` for the query.
4. Click customize and see the execution of `phpinfo()` when the page loads.