Vendors / WP All Import Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now WP All Import records in CISA KEV No WP All Import vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.15215 · Published 2022-07-18 · No fix listed CWE-434
Priority LOW 32
Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00384 · Published 2024-04-15 · No fix listed CWE-502
Open these records in search → All records by CVSS severity
0 7 1 0 0
