CVE-2023-5905

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
Unknown	DeMomentSomTres WordPress Export Posts With Images	<= 20220825

References

https://wpscan.com/vulnerability/f94e91ef-1773-476c-9945-37e89ceefd3fExploit, Third Party Advisory
https://wpscan.com/vulnerability/f94e91ef-1773-476c-9945-37e89ceefd3fExploit, Third Party Advisory

Timeline

Published: Jan 15, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-59067.5The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthoriz CVE-2023-59076.5The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root out CVE-2023-59089.1KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.CVE-2023-59097.5KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.CVE-2023-59106.1A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.p CVE-2023-59114.8The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could CVE-2023-59126.7A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privile CVE-2023-59139.8Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated pri CVE-2023-59146.1Cross-site scripting (XSS)CVE-2023-59155.3A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerab CVE-2023-59164.3A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save CVE-2023-59176.1A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file