Smackcoders WP Ultimate Exporter Code Injection Vulnerability Allowing PHP Remote File Inclusion

Vulnerability

A code injection vulnerability has been identified in the Smackcoders WP Ultimate Exporter plugin for WordPress, specifically in versions through 2.9.1. This vulnerability allows for PHP remote file inclusion, which could lead to remote code execution on the affected site.

Impact

Exploitation of this vulnerability allows for remote code execution on the target website, potentially leading to unauthorized access and control over the site.

Remediation

Users of the WP Ultimate Exporter plugin should update to version 2.9.2 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
10.0
exploitability
5.0
remediation
7.7
relevance
0.0
threat
1.1
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.