Skip to content
Threat Feed
Subscribe

Product

Post Export Import With Media Plugin (<= 1.13.1)

1 brief RSS
high advisory

CVE-2026-13430: WordPress Post Export Import with Media Plugin Arbitrary File Upload Leading to RCE

A high-severity arbitrary file upload vulnerability, CVE-2026-13430, exists in all versions up to 1.13.1 of the Post Export Import with Media plugin for WordPress, allowing authenticated administrators to upload executable web shells via a trailing-dot filename bypass, leading to remote code execution.

Post Export Import with Media plugin web-vulnerability wordpress arbitrary-file-upload rce
1r 2t 1c