CVE-2026-5335
Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure
The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possible for any visitors to leak sensitive user information.
CVSS 3.1 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products