Approved changes feed: RSS · Atom

cpe:2.3:a:demomentsomtres:export_posts_with_images:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorDemomentsomtres (e2637cf6-a06e-5094-af3b-f9d0d3afbd4b)
ProductExport Posts With Images (f28b2154-854c-5f38-b6fe-1fb03f6041dc)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/demomentsomtres-wp-export purl2cpe 2026-06-01 10:18:21.638605

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5905 vulnerable 2026-06-08 06:19:45.056661 DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export
The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.
Published: 2024-01-15T15:10:43.450Z
Updated: 2025-06-20T16:52:07.644Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.