Skip to content
OpenAdvisories

Vendor

wpallimport

4 known vulnerabilities.

Products

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2022-1565 Public exploit EPSS 15%

    Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload

    The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with administrator level pe…

    wpallimport WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets