WordPress Import Csv Files Vulnerabilities

Wordpress Import Csv Files vulnerabilities.

10 April 2024

Cross-Site Request Forgery (CSRF) Vulnerability in Soflyy's Import any XML or CSV File to WordPress
CVE-2024-31939
WordpressImport Any Xml Or Csv ...4.3MEDIUM

22 January 2024

WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE
CVE-2023-7082
WordpressImport any XML or CSV ...👾🟡7.2HIGH

7 November 2022

WP All Import < 3.6.9 - Admin+ Directory traversal via file upload
CVE-2022-2711
WordpressImport Any Xml Or Csv ...7.2HIGH
WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
CVE-2022-3418
WordpressImport Any Xml Or Csv ...7.2HIGH

17 July 2022

Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
CVE-2022-2146
WordpressImport Csv Files6.1MEDIUM

4 July 2022

WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
CVE-2022-2268
WordpressImport Any Xml Or Csv ...7.2HIGH

28 June 2022

WordPress Import any XML or CSV File to WordPress plugin <= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability
CVE-2022-36386
WordpressImport Any Xml Or Csv ...9.1CRITICAL

2 May 2022

Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
CVE-2022-1273
WordpressImport WP – Import And...7.2HIGH

6 December 2021

WP All Import < 3.6.3 - Admin+ Stored Cross-Site Scripting
CVE-2021-24714
WordpressImport Any Xml Or Csv ...4.8MEDIUM

No more vulnerabilities to load.