WP Attachment Export

WP Attachment Export has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for WP Attachment Export has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nitin Venkatesh. WP Attachment Export is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Attachment Export vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2015-20067

WP Attachment Export < 0.2.4 - Arbitrary File Download

Read the full analysis

Vulnerability Records

1 records


2015-07-15 00:00	WP Attachment Export < 0.2.4 - Arbitrary File Download WP Attachment Export < 0.2.4	`CVE-2015-20067`	7.5 High	Nitin Venkatesh	Yes

Showing 1–1 of 1 reports

Latestv0.3.3

WP Attachment Export

Author

Pete

4.6(19)

92/100

Last Updated

2017-11-28 (9y ago)

Active Installs

600+

Downloads

53,609

Requires WP

3.0+

Requires PHP

Tested up to

WP 4.3.34

Created

2012-07-24 (14y ago)

Note: Obsolete since WordPress 4.4 This feature has been added into the core of WordPress 4.4. You can now export your attachments by going to Tools->Export and select ‘Media’ as the export type. Original Description WP Attachment Export allows you to export your media library into a WordPress eXtended RSS or WXR file. You can then use the Tools->Import function in another WordPress installation to import the media library. Issues / Bug reporting Found a bug? Please use the issue tracker at https://github.com/thehelvetian/wp-attachment-export/issues Usage User PhiLho has put together a good summary on how to use the plugin at https://wordpress.org/support/topic/good-but-could-use-more-explanations. Thanks PhiLho!

View on WordPress.org