PE
Product
Post Export Import with Media
4
CVEs
0
On KEV
7.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add Post Export Import with Media to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104764 | 7.2 | Oct 14 | Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter Affected: through 1.17.1 |
| CVE-2026-13430 | 7.2 | Jul 10 | Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import Affected: through 1.13.1 |
| CVE-2026-110268 | 4.9 | Oct 17 | Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter Affected: through 1.17.2 |
| CVE-2026-104763 | 4.9 | Oct 10 | Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json Affected: through 1.17.1 |
Showing 4