Skip to content
OpenAdvisories

Vendor

jcollings

3 known vulnerabilities.

Products

Import WP – Export and Import CSV and XML files to WordPress 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2025-12137 Public exploit

    Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read

    The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.14.16. This is due to the plugin's REST API endpoint accepting arbitrary absolute file paths wit…

    jcollings Import WP – Export and Import CSV and XML files to WordPress Web / CMS