Import Export WordPress Users

Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function vulnerability <= 2.6.2

Authenticated (Admin+) PHP Object Injection via form_data Parameter vulnerability <= 2.6.2

Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function vulnerability <= 2.6.2

Authenticated (Administrator+) ServerSide Request Forgery via validate_file Function vulnerability <= 2.6.2

Deserialization of untrusted data vulnerability <= 2.5.3