← WordPress Vulnerabilities
WordPress security by component

Export WP Page to Static HTML/CSS

Export WP Page to Static HTML/CSS is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published May 25, 2026; the highest CVE/CNA score is 7.1.

Plugin slug: export-wp-page-to-static-html

CVE-2026-24574: Export WP Page to Static HTML/CSS: Cross-site request forgery

Export WP Page to Static HTML/CSS is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 6.0.0.

PublishedMay 25, 2026
Known safe version6.0.1
Safe version
May 25, 2026 CVE-2026-24574
Export WP Page to Static HTML/CSS: Cross-site request forgery
Export WP Page to Static HTML/CSS is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 6.0.0.
6.0.1
CVE6.5
NVDPending
Sep 09, 2025 CVE-2025-58980
Export WP Page to Static HTML/CSS: A security weakness
Export WP Page to Static HTML/CSS is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Jun 20, 2024 CVE-2024-3597
Export WP Page to Static HTML/CSS: An open redirect
Export WP Page to Static HTML/CSS is affected by an open redirect. The vulnerable path is reachable without authentication. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
See mitigation notes
CVE7.1
NVD6.1
Jan 11, 2024 CVE-2023-6369
Export WP Page to Static HTML/CSS: A security weakness
Export WP Page to Static HTML/CSS is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVD5.4
Nov 10, 2023 CVE-2023-31077
Export Wp Page To Static Html: Cross-site request forgery
Export Wp Page To Static Html is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD8.8