Read the docs

aleapp

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

aleapp records in CISA KEV

No aleapp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Csv Mass Importer 1 record HIGH

Records

1 record in Csv Mass Importer · all components

TI-2025-03725 CVE-2025-4190 · GHSA-7rm6-cjw9-cf8v

CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload

Priority HIGH 67

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (f…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00581 Published 2025-05-17 No fix listed
Open these records in search →