WPScan

WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal

WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules

WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options

WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names

WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling

Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token