Skip to content
OpenAdvisories

Product · WP All Import

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2022-1565 Public exploit EPSS 15%

    Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload

    The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with administrator level pe…

    WP All Import WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets