← WordPress Vulnerabilities
WordPress security by component

Design Import/Export

Design Import/Export is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 13, 2025; the highest CVE/CNA score is 4.9.

Plugin slug: design-import-export

CVE-2025-14050: Design Import/Export: SQL injection

Design Import/Export is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 13, 2025
Safe version guidanceSee mitigation notes
Safe version
Dec 13, 2025 CVE-2025-14050
Design Import/Export: SQL injection
Design Import/Export is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE4.9
NVDPending