Vulnerabilities > CVE-2022-0236 - Missing Authorization vulnerability in Vjinfotech WP Import Export Lite

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

vjinfotech

CWE-862

NVD

Published: 2022-01-18

Updated: 2024-11-21

Summary

The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download found in the ~/includes/classes/class-wpie-general.php file. This made it possible for unauthenticated attackers to download any imported or exported information from a vulnerable site which can contain sensitive information like user data. This affects versions up to, and including, 3.9.15.

Vulnerable Configurations

Part	Description	Count
Application	Vjinfotech Vjinfotech WP Import Export Lite - Vjinfotech WP Import Export Lite 1.0.0 Vjinfotech WP Import Export Lite 1.0.1 Vjinfotech WP Import Export Lite 1.0.2 Vjinfotech WP Import Export Lite 1.0.3 Vjinfotech WP Import Export Lite 1.0.4 Vjinfotech WP Import Export Lite 1.0.5 Vjinfotech WP Import Export Lite 1.0.6 Vjinfotech WP Import Export Lite 1.0.7 Vjinfotech WP Import Export Lite 1.0.8 Vjinfotech WP Import Export Lite 1.0.9 Vjinfotech WP Import Export Lite 1.0.10 Vjinfotech WP Import Export Lite 1.0.11 Vjinfotech WP Import Export Lite 1.0.12 Vjinfotech WP Import Export Lite 1.0.13 Vjinfotech WP Import Export Lite 1.0.14 Vjinfotech WP Import Export Lite 1.0.15 Vjinfotech WP Import Export Lite 1.0.16 Vjinfotech WP Import Export Lite 1.0.17 Vjinfotech WP Import Export Lite 1.1.0 Vjinfotech WP Import Export Lite 1.1.1 Vjinfotech WP Import Export Lite 1.2.0 Vjinfotech WP Import Export Lite 1.2.1 Vjinfotech WP Import Export Lite 1.2.2 Vjinfotech WP Import Export Lite 1.2.3 Vjinfotech WP Import Export Lite 1.3.0 Vjinfotech WP Import Export Lite 1.4.0 Vjinfotech WP Import Export Lite 1.4.1 Vjinfotech WP Import Export Lite 1.5.0 Vjinfotech WP Import Export Lite 1.5.1 Vjinfotech WP Import Export Lite 1.5.2 Vjinfotech WP Import Export Lite 1.5.3 Vjinfotech WP Import Export Lite 1.5.4 Vjinfotech WP Import Export Lite 1.5.5 Vjinfotech WP Import Export Lite 1.5.6 Vjinfotech WP Import Export Lite 1.5.7 Vjinfotech WP Import Export Lite 1.5.8 Vjinfotech WP Import Export Lite 1.5.9 Vjinfotech WP Import Export Lite 1.5.10 Vjinfotech WP Import Export Lite 1.5.11 Vjinfotech WP Import Export Lite 1.5.12 Vjinfotech WP Import Export Lite 1.5.13 Vjinfotech WP Import Export Lite 1.6.0 Vjinfotech WP Import Export Lite 1.6.1 Vjinfotech WP Import Export Lite 1.6.2 Vjinfotech WP Import Export Lite 1.6.3 Vjinfotech WP Import Export Lite 1.6.4 Vjinfotech WP Import Export Lite 1.6.5 Vjinfotech WP Import Export Lite 1.7.0 Vjinfotech WP Import Export Lite 2.0.0 Vjinfotech WP Import Export Lite 2.1.0 Vjinfotech WP Import Export Lite 2.2.0 Vjinfotech WP Import Export Lite 2.3.0 Vjinfotech WP Import Export Lite 3.0.0 Vjinfotech WP Import Export Lite 3.0.1 Vjinfotech WP Import Export Lite 3.0.2 Vjinfotech WP Import Export Lite 3.1.0 Vjinfotech WP Import Export Lite 3.2.0 Vjinfotech WP Import Export Lite 3.3.0 Vjinfotech WP Import Export Lite 3.3.1 Vjinfotech WP Import Export Lite 3.3.2 Vjinfotech WP Import Export Lite 3.3.3 Vjinfotech WP Import Export Lite 3.3.4 Vjinfotech WP Import Export Lite 3.3.5 Vjinfotech WP Import Export Lite 3.3.6 Vjinfotech WP Import Export Lite 3.3.7 Vjinfotech WP Import Export Lite 3.4.0 Vjinfotech WP Import Export Lite 3.4.1 Vjinfotech WP Import Export Lite 3.4.2 Vjinfotech WP Import Export Lite 3.4.3 Vjinfotech WP Import Export Lite 3.5.0 Vjinfotech WP Import Export Lite 3.5.1 Vjinfotech WP Import Export Lite 3.5.2 Vjinfotech WP Import Export Lite 3.6.0 Vjinfotech WP Import Export Lite 3.6.1 Vjinfotech WP Import Export Lite 3.7.0 Vjinfotech WP Import Export Lite 3.8.0 Vjinfotech WP Import Export Lite 3.8.1 Vjinfotech WP Import Export Lite 3.9.0 Vjinfotech WP Import Export Lite 3.9.1 Vjinfotech WP Import Export Lite 3.9.2 Vjinfotech WP Import Export Lite 3.9.3 Vjinfotech WP Import Export Lite 3.9.4 Vjinfotech WP Import Export Lite 3.9.5 Vjinfotech WP Import Export Lite 3.9.6 Vjinfotech WP Import Export Lite 3.9.7 Vjinfotech WP Import Export Lite 3.9.8 Vjinfotech WP Import Export Lite 3.9.9 Vjinfotech WP Import Export Lite 3.9.10 Vjinfotech WP Import Export Lite 3.9.11 Vjinfotech WP Import Export Lite 3.9.12 Vjinfotech WP Import Export Lite 3.9.13 Vjinfotech WP Import Export Lite 3.9.14 Vjinfotech WP Import Export Lite 3.9.15 Vjinfotech WP Import Export - Vjinfotech WP Import Export 1.0.0 Vjinfotech WP Import Export 1.0.1 Vjinfotech WP Import Export 1.0.2 Vjinfotech WP Import Export 1.0.3 Vjinfotech WP Import Export 1.0.4 Vjinfotech WP Import Export 1.0.5 Vjinfotech WP Import Export 1.0.6 Vjinfotech WP Import Export 1.0.7 Vjinfotech WP Import Export 1.0.8 Vjinfotech WP Import Export 1.0.9 Vjinfotech WP Import Export 1.0.10 Vjinfotech WP Import Export 1.0.11 Vjinfotech WP Import Export 1.0.12 Vjinfotech WP Import Export 1.0.13 Vjinfotech WP Import Export 1.0.14 Vjinfotech WP Import Export 1.0.15 Vjinfotech WP Import Export 1.0.16 Vjinfotech WP Import Export 1.0.17 Vjinfotech WP Import Export 1.1.0 Vjinfotech WP Import Export 1.1.1 Vjinfotech WP Import Export 1.2.0 Vjinfotech WP Import Export 1.2.1 Vjinfotech WP Import Export 1.2.2 Vjinfotech WP Import Export 1.2.3 Vjinfotech WP Import Export 1.3.0 Vjinfotech WP Import Export 1.4.0 Vjinfotech WP Import Export 1.4.1 Vjinfotech WP Import Export 1.5.0 Vjinfotech WP Import Export 1.5.1 Vjinfotech WP Import Export 1.5.2 Vjinfotech WP Import Export 1.5.3 Vjinfotech WP Import Export 1.5.4 Vjinfotech WP Import Export 1.5.5 Vjinfotech WP Import Export 1.5.6 Vjinfotech WP Import Export 1.5.7 Vjinfotech WP Import Export 1.5.8 Vjinfotech WP Import Export 1.5.9 Vjinfotech WP Import Export 1.5.10 Vjinfotech WP Import Export 1.5.11 Vjinfotech WP Import Export 1.5.12 Vjinfotech WP Import Export 1.5.13 Vjinfotech WP Import Export 1.6.0 Vjinfotech WP Import Export 1.6.1 Vjinfotech WP Import Export 1.6.2 Vjinfotech WP Import Export 1.6.3 Vjinfotech WP Import Export 1.6.4 Vjinfotech WP Import Export 1.6.5 Vjinfotech WP Import Export 1.7.0 Vjinfotech WP Import Export 2.0.0 Vjinfotech WP Import Export 2.1.0 Vjinfotech WP Import Export 2.2.0 Vjinfotech WP Import Export 2.3.0 Vjinfotech WP Import Export 3.0.0 Vjinfotech WP Import Export 3.0.1 Vjinfotech WP Import Export 3.0.2 Vjinfotech WP Import Export 3.1.0 Vjinfotech WP Import Export 3.2.0 Vjinfotech WP Import Export 3.3.0 Vjinfotech WP Import Export 3.3.1 Vjinfotech WP Import Export 3.3.2 Vjinfotech WP Import Export 3.3.3 Vjinfotech WP Import Export 3.3.4 Vjinfotech WP Import Export 3.3.5 Vjinfotech WP Import Export 3.3.6 Vjinfotech WP Import Export 3.3.7 Vjinfotech WP Import Export 3.4.0 Vjinfotech WP Import Export 3.4.1 Vjinfotech WP Import Export 3.4.2 Vjinfotech WP Import Export 3.4.3 Vjinfotech WP Import Export 3.5.0 Vjinfotech WP Import Export 3.5.1 Vjinfotech WP Import Export 3.5.2 Vjinfotech WP Import Export 3.6.0 Vjinfotech WP Import Export 3.6.1 Vjinfotech WP Import Export 3.7.0 Vjinfotech WP Import Export 3.8.0 Vjinfotech WP Import Export 3.8.1 Vjinfotech WP Import Export 3.9.0 Vjinfotech WP Import Export 3.9.1 Vjinfotech WP Import Export 3.9.2 Vjinfotech WP Import Export 3.9.3 Vjinfotech WP Import Export 3.9.4 Vjinfotech WP Import Export 3.9.5 Vjinfotech WP Import Export 3.9.6 Vjinfotech WP Import Export 3.9.7 Vjinfotech WP Import Export 3.9.8 Vjinfotech WP Import Export 3.9.9 Vjinfotech WP Import Export 3.9.10 Vjinfotech WP Import Export 3.9.11 Vjinfotech WP Import Export 3.9.12 Vjinfotech WP Import Export 3.9.13 Vjinfotech WP Import Export 3.9.14 Vjinfotech WP Import Export 3.9.15	188

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References