Market Exporter
Approved changes feed: RSS · Atom
cpe:2.3:a:anton_vanyukov:market_exporter:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Anton Vanyukov (d483d48e-825c-5efd-bcc7-546720c3267d) |
|---|---|
| Product | Market Exporter (3479488c-f750-5c02-b070-1278815e370f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-49269 |
vulnerable | 2026-06-08 07:29:12.836592 |
WordPress Market Exporter plugin <= 2.0.22 - Cross Site Request Forgery (CSRF) Vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Anton Vanyukov Market Exporter market-exporter allows Cross Site Request Forgery.This issue affects Market Exporter: from n/a through <= 2.0.22.
Published: 2025-06-06T12:53:39.500Z
Updated: 2026-04-28T16:12:59.769Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26995 |
vulnerable | 2026-06-08 07:14:50.795075 |
WordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through <= 2.0.21.
Published: 2025-02-25T14:17:59.685Z
Updated: 2026-04-28T16:11:46.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5637 |
vulnerable | 2026-06-08 06:56:16.840281 |
Market Exporter <= 2.0.19 - Missing Authorization to Arbitrary File Deletion
HIGH (7.5)
The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_files' function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to use path traversal to delete arbitrary files on the server.
Published: 2024-06-07T11:02:21.508Z
Updated: 2026-04-08T17:20:30.577Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.