Vendor

wpallimport

4 known vulnerabilities.

Products

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets 4

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2026-2830

WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'

The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and…

wpallimport WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets Web / CMS

Mar 6, 2026