← Back

Export All Urls

export_all_urls

Vendor: Atlasgondal • 7 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-51510
1Atlasgondal
1Export All Urls
Jun 17, 2026
Mar 16, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Cross-Site Request Forgery (CSRF) vulnerability in Atlas Gondal Export Media URLs.This issue affects Export Media URLs: from n/a through 1.0.
CVE-2023-3118
1Atlasgondal
1Export All Urls
Jun 17, 2026
Jul 10, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege use...Show more
The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminShow less
CVE-2022-27856
1Atlasgondal
1Export All Urls
Jun 17, 2026
May 10, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Atlas Gondal Export All URLs plugin <= 4.1 versions.
CVE-2022-2638
1Atlasgondal
1Export All Urls
Jun 17, 2026
Aug 29, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from...Show more
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the serverShow less
CVE-2022-29452
1Atlasgondal
1Export All Urls
Jun 17, 2026
Jun 15, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress.
CVE-2022-0914
1Atlasgondal
1Export All Urls
Jun 17, 2026
Apr 11, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbi...Show more
The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbitrary CSV file, which the attacker can then download and retrieve the list of titles for exampleShow less
CVE-2022-0892
1Atlasgondal
1Export All Urls
Jun 17, 2026
Apr 11, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page, leading to a Reflected Cross-Site Scripting