Import any XML or CSV File to WordPress

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Import any XML or CSV File to WordPress

Information

Software Type Plugin
Software Slug wp-all-import (view on wordpress.org)
Software Status Active
Software Author wpallimport
Software Website www.wpallimport.com
Software Downloads 3,970,929
Software Active Installs 100,000
Software Record Last Updated May 16, 2024

18 Vulnerabilities

Import any XML or CSV File to WordPress <= 3.7.3 - Cross-Site Request Forgery to Notice Dismissal
4.3
CVE-2024-31939
Apr 10, 2024
Researcher: Dhabaleshwar Das
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
7.2
CVE-2023-7082
Dec 29, 2023
Researcher: quangnt
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
6.5
CVE-2022-2711
Oct 17, 2022
Researcher: lucy
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload
6.5
CVE-2022-3418
Oct 17, 2022
Researcher: lucy
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload
4.8
CVE-2022-2268
Jul 1, 2022
Researcher: moresec
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
7.2
CVE-2022-1565
Jun 30, 2022
Researcher: yangkang
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution
9.1
CVE-2022-36386
Jun 28, 2022
Researcher: Universe
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jun 2, 2022
Researchers:
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
4.8
CVE-2021-24714
Nov 2, 2021
Researcher: Huy Nguyen
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
6.3
CVE ID Unknown
Feb 19, 2020
Researcher: Kacper Szurek
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
7.2
CVE ID Unknown
Feb 19, 2020
Researcher: Kacper Szurek
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
7.5
CVE-2015-9331
Aug 20, 2019
Researchers: James Golovich, Ibrahim Raafat
WP All Import <= 3.4.6 - Cross-Site Scripting
6.1
CVE-2018-0547
Mar 8, 2018
Researcher: Yuji Tounai
WP All Import <= 3.4.5 - Cross-Site Scripting
6.1
CVE-2018-0546
Mar 8, 2018
Researcher: Mardan Muhidin
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting
6.1
CVE-2018-20978
Mar 7, 2018
Researcher: Mardan Muhidin
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting
6.1
CVE-2017-18567
Oct 8, 2017
Researchers:
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection
9.8
CVE-2015-9330
Mar 12, 2015
Researchers:
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
6.1
CVE-2015-9329
Feb 26, 2015
Researcher: Kacper Szurek
Title Status CVE ID CVSS Researchers Date
Import any XML or CSV File to WordPress <= 3.7.3 - Cross-Site Request Forgery to Notice Dismissal Patched CVE-2024-31939 4.3 Dhabaleshwar Das April 10, 2024
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload Patched CVE-2023-7082 7.2 quangnt December 29, 2023
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal Patched CVE-2022-2711 6.5 lucy October 17, 2022
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload Patched CVE-2022-3418 6.5 lucy October 17, 2022
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload Patched CVE-2022-2268 4.8 moresec July 1, 2022
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload Patched CVE-2022-1565 7.2 yangkang June 30, 2022
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution Patched CVE-2022-36386 9.1 Universe June 28, 2022
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting Patched 6.1 June 2, 2022
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting Patched CVE-2021-24714 4.8 Huy Nguyen November 2, 2021
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks Patched 6.3 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection Patched 7.2 Kacper Szurek February 19, 2020
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks Patched CVE-2015-9331 7.5 James Golovich, Ibrahim Raafat August 20, 2019
WP All Import <= 3.4.6 - Cross-Site Scripting Patched CVE-2018-0547 6.1 Yuji Tounai March 8, 2018
WP All Import <= 3.4.5 - Cross-Site Scripting Patched CVE-2018-0546 6.1 Mardan Muhidin March 8, 2018
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting Patched CVE-2018-20978 6.1 Mardan Muhidin March 7, 2018
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting Patched CVE-2017-18567 6.1 October 8, 2017
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection Patched CVE-2015-9330 9.8 March 12, 2015
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting Patched CVE-2015-9329 6.1 Kacper Szurek February 26, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation