CVE Feed

    Dashboard / CVE / CVE-2022-3395

    CVE-2022-3395

    The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL statements, leading to a SQL Injection vulnerability. By default only users with the Administrator role can perform exports, but this can be delegated to lower privileged users as well.

    Published:Oct 25, 2022
    Last Modified:May 7, 2025
    EPS:Oct 25, 2022
    EPSS Score:0.0029
    CVSS Score:8.8

    Affected Products

    Vendor
    Soflyy
    Product
    Wp All Export

    Exploits

    https://wpscan.com/vulnerability/10742154-368a-40be-a67d-80ea848493a0https://wpscan.com/vulnerability/10742154-368a-40be-a67d-80ea848493a0

    Related CVEs

    CVE-2024-7425 (CVSS 6.8) — The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to…
    CVE-2024-7419 (CVSS 8.3) — The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and i…
    CVE-2023-5882 (CVSS 8.8) — The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin bef…
    CVE-2023-4724 (CVSS 7.2) — The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin bef…
    CVE-2023-5886 (CVSS 8.8) — The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin bef…
    CVE-2022-3394 (CVSS 7.2) — The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to u…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High