Import any XML or CSV File to WordPress

Information

Software Type Plugin
Software Slug wp-all-import (view on wordpress.org)
Software Status Active
Software Author wpallimport
Software Website www.wpallimport.com
Software Downloads 4,322,576
Software Active Installs 100,000
Software Record Last Updated October 29, 2024

18 Vulnerabilities

Title Status CVE ID CVSS Researchers Date
Import any XML or CSV File to WordPress <= 3.7.3 - Cross-Site Request Forgery to Notice Dismissal Patched CVE-2024-31939 4.3 Dhabaleshwar Das April 10, 2024
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload Patched CVE-2023-7082 7.2 quangnt December 29, 2023
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal Patched CVE-2022-2711 6.5 lucy October 17, 2022
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload Patched CVE-2022-3418 6.5 lucy October 17, 2022
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload Patched CVE-2022-2268 4.8 moresec July 1, 2022
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload Patched CVE-2022-1565 7.2 yangkang June 30, 2022
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution Patched CVE-2022-36386 9.1 Universe June 28, 2022
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting Patched 6.1 June 2, 2022
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting Patched CVE-2021-24714 4.8 Huy Nguyen November 2, 2021
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks Patched 6.3 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection Patched 7.2 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks Patched CVE-2015-9331 7.5 James Golovich, Ibrahim Raafat August 20, 2019
WP All Import <= 3.4.6 - Cross-Site Scripting Patched CVE-2018-0547 6.1 Yuji Tounai March 8, 2018
WP All Import <= 3.4.5 - Cross-Site Scripting Patched CVE-2018-0546 6.1 Mardan Muhidin March 8, 2018
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting Patched CVE-2018-20978 6.1 Mardan Muhidin March 7, 2018
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting Patched CVE-2017-18567 6.1 October 8, 2017
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection Patched CVE-2015-9330 9.8 March 12, 2015
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting Patched CVE-2015-9329 6.1 Kacper Szurek February 26, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation