Comments Import & Export vulnerabilities | LiveThreat CVE Feed

Product

Comments Import & Export

by webtoffee · last CVE Mar 25, 2026

CVEs

On KEV

7.7

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Comments Import & Export to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-32441	7.7	0%	Mar 25	WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability Affected: through <= 2.4.9
CVE-2024-7514	6.5	1%	Oct 11	WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal Affected: through 2.3.7
CVE-2025-3919	6.4	0%	Jun 2	WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting Affected: through 2.4.3