CVE-2023-5905

8.1 highEPSS 0.6%

High (8.1) in demomentsomtres export posts with images. EPSS 0.6% chance of exploitation in the next 30 days.

The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of requests to export the blog data, allowing any logged in user, such as subscribers to export the contents of the blog, including restricted and unpublished posts, as well as passwords of protected posts.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2024-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

demomentsomtres:export_posts_with_images

References

https://wpscan.com/vulnerability/f94e91ef-1773-476c-9945-37e89ceefd3f
https://wpscan.com/vulnerability/f94e91ef-1773-476c-9945-37e89ceefd3f

Check your stack JSON