WP Import Export Lite

Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 3.9.29

Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 3.9.28

Authenticated (Contributor+) DOMBased Stored CrossSite Scripting vulnerability <= 3.9.27

PHP Object Injection vulnerability <= 3.9.26

Unauthenticated Sensitive Data Disclosure vulnerability <= 3.9.15