Import any XML or CSV File to WordPress

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Import any XML or CSV File to WordPress

Information

Software Type Plugin
Software Slug wp-all-import (view on wordpress.org)
Software Status Active
Software Author wpallimport
Software Website www.wpallimport.com
Software Downloads 3,924,019
Software Active Installs 100,000
Software Record Last Updated April 29, 2024

18 Vulnerabilities

Import any XML or CSV File to WordPress <= 3.7.3 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-31939
Apr 10, 2024
Researcher: Dhabaleshwar Das
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-7082
Dec 29, 2023
Researcher: quangnt
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
6.5
CVE-2022-2711
Oct 17, 2022
Researcher: lucy
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload
6.5
CVE-2022-3418
Oct 17, 2022
Researcher: lucy
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload
4.8
CVE-2022-2268
Jul 1, 2022
Researcher: moresec
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
7.2
CVE-2022-1565
Jun 30, 2022
Researcher: yangkang
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution
9.1
CVE-2022-36386
Jun 28, 2022
Researcher: Universe
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jun 2, 2022
Researchers:
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
4.8
CVE-2021-24714
Nov 2, 2021
Researcher: Huy Nguyen
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
6.3
CVE ID Unknown
Feb 19, 2020
Researcher: Kacper Szurek
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
7.2
CVE ID Unknown
Feb 19, 2020
Researcher: Kacper Szurek
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
7.5
CVE-2015-9331
Aug 20, 2019
Researchers: James Golovich, Ibrahim Raafat
WP All Import <= 3.4.6 - Cross-Site Scripting
6.1
CVE-2018-0547
Mar 8, 2018
Researcher: Yuji Tounai
WP All Import <= 3.4.5 - Cross-Site Scripting
6.1
CVE-2018-0546
Mar 8, 2018
Researcher: Mardan Muhidin
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting
6.1
CVE-2018-20978
Mar 7, 2018
Researcher: Mardan Muhidin
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting
6.1
CVE-2017-18567
Oct 8, 2017
Researchers:
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection
9.8
CVE-2015-9330
Mar 12, 2015
Researchers:
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
6.1
CVE-2015-9329
Feb 26, 2015
Researcher: Kacper Szurek
Title CVE ID CVSS Researchers Date
Import any XML or CSV File to WordPress <= 3.7.3 - Cross-Site Request Forgery to Notice Dismissal CVE-2024-31939 4.3 Dhabaleshwar Das April 10, 2024
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload CVE-2023-7082 7.2 quangnt December 29, 2023
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal CVE-2022-2711 6.5 lucy October 17, 2022
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload CVE-2022-3418 6.5 lucy October 17, 2022
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload CVE-2022-2268 4.8 moresec July 1, 2022
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload CVE-2022-1565 7.2 yangkang June 30, 2022
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution CVE-2022-36386 9.1 Universe June 28, 2022
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting 6.1 June 2, 2022
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting CVE-2021-24714 4.8 Huy Nguyen November 2, 2021
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks 6.3 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection 7.2 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks CVE-2015-9331 7.5 James Golovich, Ibrahim Raafat August 20, 2019
WP All Import <= 3.4.6 - Cross-Site Scripting CVE-2018-0547 6.1 Yuji Tounai March 8, 2018
WP All Import <= 3.4.5 - Cross-Site Scripting CVE-2018-0546 6.1 Mardan Muhidin March 8, 2018
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting CVE-2018-20978 6.1 Mardan Muhidin March 7, 2018
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting CVE-2017-18567 6.1 October 8, 2017
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection CVE-2015-9330 9.8 March 12, 2015
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting CVE-2015-9329 6.1 Kacper Szurek February 26, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation