Description
Administrator SQL Injection in WP All Import <= 4.0.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP All Import | WP All Import | ≤ 4.0.1 | — |
High · 7.6
CVE-2026-57628
EUVD-2026-39744GHSA-mf27-wm76-5323
WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack