Search vulnerabilities

Results 1

Export CSV
CVE-2026-5335

Magic Export & Import < 1.2.0 - Unauthenticated PII Disclosure

The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possible for any visitors to leak sensitive user information.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed