Known vulnerabilities in WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel

Easily export data from any post type, custom field, or taxonomy to a CSV, XML, or Excel file of any custom format. Supports WooCommerce products, ord …

4Reported vulnerabilities

7.2Highest CVSS score

1.5.0Latest version

100,000+Active installs

What to do now

Update WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel to 1.4.15 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 9, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-1800	High 7.2	1.3%	Before 1.3.5	`1.3.5`	June 13, 2022
CVE-2021-24708	Medium 4.8	0.6%	Before 1.3.1	`1.3.1`	November 8, 2021
WF-658ccd08-5f46-4a11-8d86-38b49027f83e	Medium 6.1	—	1.3.5 and earlier	`1.3.6`	June 7, 2022
CVE-2026-1582	Low 3.7	0.3%	0 to 1.4.14 (inclusive)	`1.4.15`	February 18, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.