Post Export Import with Media vulnerabilities

2 known vulnerabilities in Post Export Import with Media from Wpazleen. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Post Export Import with Media: Deserialization of Untrusted Data

  CVE-2026-104764Oct 14, 2026Wpazleen

  The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level acce

• 7.2 High severity

  Post Export Import with Media: Unrestricted Upload of File with Dangerous Type

  CVE-2026-13430Jul 10, 2026WpazleenEPSS 1.15%

  The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the import_media_file_secure function. This is due to insufficient file extension validation caused by a trailing-dot