Medium 6.5
2025-12-02< 2.20
CVE-2025-13606
Minimum safe version
2.20
Update to 2.20 or later to address 13 fixable vulnerabilities
CVE-2025-13606
Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
CVE-2024-12315
CVE-2025-24611
CVE-2024-56278
CVE-2023-45066
CVE-2023-2487
WP Ultimate Exporter 1.0.0 - Reflected Cross-Site Scripting (XSS)
WP Ultimate Exporter < 1.1 - Reflected Cross-Site Scripting
WordPress WP Ultimate Exporter Plugin <= 1.0.0 - XSS
WordPress WP Ultimate Exporter Plugin <= 1.1 - SQL Injection
CVE-2018-20968
CVE-2016-11000