Skip to content
OpenAdvisories

Product · Soflyy

WP All Import Pro

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-9664

    WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File

    The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserialization of untrusted input from an import file. This makes it possible for authenticated attackers, with Administrator-lev…

    Soflyy WP All Import Pro Web / CMS
  • High 7.6
    CVE-2024-9624

    WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import

    The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxi_curl_download function. This makes it possible for authenticated attackers, with Adm…

    Soflyy WP All Import Pro Web / CMS