← WordPress Vulnerabilities
WordPress security by component

Export User Data

Export User Data is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 30, 2026; the highest CVE/CNA score is 8.

Plugin slug: export-user-data

CVE-2026-12240: Export User Data: Code execution

Export User Data is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 2.2.6.

PublishedJun 30, 2026
Known safe version> 2.2.6
Safe version
Jun 30, 2026 CVE-2026-12240
Export User Data: Code execution
Export User Data is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 2.2.6.
> 2.2.6
CVE8.0
NVDPending