CVE-2026-5335

MEDIUM CVSS 5.3 View on NVD ↗

Description

The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possible for any visitors to leak sensitive user information.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://wpscan.com/vulnerability/ed6f00de-bbae-4e89-9d0e-ded0d70e781c/

Published: May 04, 2026 07:16 UTC Modified: May 04, 2026 15:23 UTC