Skip to content
OpenAdvisories

Vendor

jcollings

3 known vulnerabilities.

Products

Import WP – Export and Import CSV and XML files to WordPress 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12894

    Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure

    The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This ma…

    jcollings Import WP – Export and Import CSV and XML files to WordPress Web / CMS
  • Medium 4.9
    CVE-2025-12137 Public exploit

    Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read

    The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.14.16. This is due to the plugin's REST API endpoint accepting arbitrary absolute file paths wit…

    jcollings Import WP – Export and Import CSV and XML files to WordPress Web / CMS