How many vjinfotech WP Import Export Lite CVEs are in CISA KEV?

None of vjinfotech WP Import Export Lite's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of vjinfotech WP Import Export Lite are affected?

22 distinct vjinfotech WP Import Export Lite versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in vjinfotech WP Import Export Lite CVEs?

vjinfotech WP Import Export Lite's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

What is the average severity of vjinfotech WP Import Export Lite CVEs?

The average CVSS base score across vjinfotech WP Import Export Lite's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

vjinfotech

6 CVEs

vjinfotech WP Import Export Lite Vulnerabilities

Name: vjinfotech WP Import Export Lite vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WP Import Export Lite by vjinfotech.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2022–2026

Last updated July 3, 2026

Overview

vjinfotech WP Import Export Lite has 6 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting vjinfotech WP Import Export Lite, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of vjinfotech WP Import Export Lite's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of vjinfotech WP Import Export Lite's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No vjinfotech WP Import Export Lite CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every vjinfotech WP Import Export Lite version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.9.271 CVE
< 3.9.281 CVE
< 3.9.291 CVE
< 3.9.301 CVE
<= 3.9.151 CVE
<= 3.9.261 CVE
<= 3.9.271 CVE
<= 3.9.281 CVE
<= 3.9.291 CVE
<= 3.9.301 CVE
>= 3.9.271 CVE
3.9.15 <= v <= 3.9.151 CVE

Fixed in

> 3.9.151 CVE
> 3.9.261 CVE
> 3.9.271 CVE
> 3.9.281 CVE
> 3.9.291 CVE
> 3.9.301 CVE
3.9.271 CVE
3.9.281 CVE
3.9.291 CVE
3.9.301 CVE

Find a version

6 CVEs

Sort

WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
CVE-2026-11397
Patch
CWE-918
Medium · CVSS 5.5
EPSS 0.2% (14th pct)2026-07-03
WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-5061
Patch
CWE-434
High · CVSS 8.8
EPSS 0.7% (48th pct)2025-08-05
WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-6207
Patch
CWE-434
High · CVSS 8.8
EPSS 0.7% (48th pct)2025-08-05
WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2025-2839
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (18th pct)2025-04-22
WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability
CVE-2024-31308
Patch
CWE-502
High · CVSS 7.2
EPSS 0.4% (33th pct)2024-04-07
High vulnerability · 2022-01-18
CVE-2022-0236
Patch
CWE-862
High · CVSS 7.5
EPSS 4.3% (90th pct)2022-01-18

Common weakness types

The CWE weakness categories most often found in vjinfotech WP Import Export Lite CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many vjinfotech WP Import Export Lite CVEs were published each year.

2022

1

2024

1

2025

3

2026

1

Other vjinfotech products

Browse vulnerabilities for other products by vjinfotech.

woo custom and sequential order number1 CVEs wp import export1 CVEs

All vjinfotech vulnerabilities

Frequently asked questions

Common questions about vjinfotech WP Import Export Lite vulnerabilities.

How many CVEs does vjinfotech WP Import Export Lite have?: vjinfotech WP Import Export Lite has 6 published CVE records since 2022.
How many vjinfotech WP Import Export Lite CVEs are in CISA KEV?: None of vjinfotech WP Import Export Lite's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for vjinfotech WP Import Export Lite vulnerabilities?: No vjinfotech WP Import Export Lite CVEs currently have a tracked public exploit in this dataset.
Which versions of vjinfotech WP Import Export Lite are affected?: 22 distinct vjinfotech WP Import Export Lite versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in vjinfotech WP Import Export Lite CVEs?: vjinfotech WP Import Export Lite's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).
What is the average severity of vjinfotech WP Import Export Lite CVEs?: The average CVSS base score across vjinfotech WP Import Export Lite's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track vjinfotech WP Import Export Lite vulnerabilities

Monitor new vjinfotech WP Import Export Lite vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing