Vulnerabilities

TI-2020-18984 CVE-2020-36849 · GHSA-p27j-qf57-7cm7

AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

HIGH 82

The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07992 Published 2025-07-12 No fix listed CWE-434

TI-2024-21163 CVE-2024-32086 · GHSA-hgxh-g8gm-w483

WordPress Citadela Listing plugin <= 5.18.1 - Unauth. Sensitive Data Exposure vulnerability

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a through 5.18.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00519 Published 2024-04-16 No fix listed CWE-200

TI-2024-21162 CVE-2024-32085 · GHSA-xwvw-jh49-gmh9

WordPress Citadela Listing plugin < 5.20.0 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a before 5.20.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00209 Published 2024-04-15 Fixed in 5.20.0 CWE-352

Vulnerabilities

Filters

AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

WordPress Citadela Listing plugin <= 5.18.1 - Unauth. Sensitive Data Exposure vulnerability

WordPress Citadela Listing plugin < 5.20.0 - Cross-Site Request Forgery (CSRF) vulnerability