WP All Import Pro

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP All Import Pro

Information

Software Type Plugin
Software Slug wp-all-import-pro
Software Status Active
Software Author Soflyy
Software Website www.wpallimport.com
Software Active Installs 272,352
Software Record Last Updated January 13, 2025

7 Vulnerabilities

Submit a Vulnerability
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
7.6
CVE-2024-9624
Dec 16, 2024
Researcher: Ivan Kuzymchak
All Import Pro Plugin < 4.1.2 - SQL injection
8.8
CVE ID Unknown
Mar 19, 2020
Researcher: Kacper Szurek
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting
6.1
CVE ID Unknown
Feb 19, 2020
Researchers: James Golovich, Ibrahim Raafat
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
7.2
CVE ID Unknown
Feb 19, 2020
Researcher: Kacper Szurek
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
6.3
CVE ID Unknown
Feb 19, 2020
Researcher: Kacper Szurek
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
7.5
CVE-2015-9331
Aug 20, 2019
Researchers: James Golovich, Ibrahim Raafat
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
6.1
CVE-2015-9329
Feb 26, 2015
Researcher: Kacper Szurek
Title Status CVE ID CVSS Researchers Date
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import Patched CVE-2024-9624 7.6 Ivan Kuzymchak December 16, 2024
All Import Pro Plugin < 4.1.2 - SQL injection Patched 8.8 Kacper Szurek March 19, 2020
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting Patched 6.1 James Golovich, Ibrahim Raafat February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection Patched 7.2 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks Patched 6.3 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks Patched CVE-2015-9331 7.5 James Golovich, Ibrahim Raafat August 20, 2019
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting Patched CVE-2015-9329 6.1 Kacper Szurek February 26, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation