{"id":"CVE-2026-76559","state":"PUBLISHED","title":"WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling","description":"The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their responses. This is an incomplete fix for CVE-2026-11397.","publishedAt":"2026-09-16T06:00:11.796Z","updatedAt":"2026-09-17T12:39:41.227Z","severity":{"score":4.1,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown WP Import Export Lite"],"affected":[{"vendor":"Unknown","product":"WP Import Export Lite","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.9.33","versionType":"semver"}]}],"references":["https://wpscan.com/vulnerability/62e27c51-95c7-407b-81aa-85757130adb9/"],"weaknesses":["CWE-918"],"ingestedAt":"2026-10-29T20:12:58.252Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/76xxx/CVE-2026-76559.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-76559","state":"PUBLISHED","datePublished":"2026-09-16T06:00:11.796Z","dateUpdated":"2026-09-17T12:39:41.227Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2026-08-19T12:52:50.627Z"},"containers":{"cna":{"title":"WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling","descriptions":[{"lang":"en","value":"The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their responses. This is an incomplete fix for CVE-2026-11397."}],"affected":[{"vendor":"Unknown","product":"WP Import Export Lite","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.9.33","versionType":"semver"}]}],"references":[{"url":"https://wpscan.com/vulnerability/62e27c51-95c7-407b-81aa-85757130adb9/","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-918 Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2026-09-16T06:00:11.796Z"},"credits":[{"lang":"en","value":"Yassin Mohamed","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":4.1,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"HIGH","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-09-17T12:21:25.348541Z","id":"CVE-2026-76559","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","type":"CWE","lang":"en","description":"CWE-918 Server-Side Request Forgery (SSRF)"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-17T12:39:41.227Z"}}]}}}