Soflyy Wp All Import
19 CVEs affecting Soflyy Wp All Import. Latest disclosed: 2025-02-07. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9330 | Critical | 9.8 | 2019-08-20 | The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection. |
CVE-2022-36386 | Critical | 9.1 | 2022-09-21 | Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress. |
CVE-2015-9331 | High | 7.5 | 2019-08-20 | The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit. |
CVE-2024-9664 | High | 7.2 | 2025-02-07 | The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserialization of untrusted i… |
CVE-2022-3418 | High | 7.2 | 2022-11-07 | The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which… |
CVE-2022-2711 | High | 7.2 | 2022-11-07 | The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privil… |
CVE-2022-2268 | High | 7.2 | 2022-07-04 | The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted… |
CVE-2018-20978 | Medium | 6.1 | 2019-08-20 | The wp-all-import plugin before 3.4.7 for WordPress has XSS. |
CVE-2017-18567 | Medium | 6.1 | 2019-08-20 | The wp-all-import plugin before 3.4.6 for WordPress has XSS. |
CVE-2015-9329 | Medium | 6.1 | 2019-08-20 | The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. |
CVE-2018-16259 | Medium | 6.1 | 2019-04-12 | There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. NOTE: The vendor states that this is not a… |
CVE-2018-16258 | Medium | 6.1 | 2019-04-12 | There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. NOTE: The vendor states that this is not a vulnera… |
CVE-2018-16257 | Medium | 6.1 | 2019-04-12 | There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: The vendor states that this is not a vulnerabilit… |
CVE-2018-16256 | Medium | 6.1 | 2019-04-12 | There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule). NOTE: The vendor states that this is not a vulne… |
CVE-2018-16255 | Medium | 6.1 | 2019-04-12 | There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All… |
CVE-2018-16254 | Medium | 6.1 | 2019-04-12 | There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options. NOTE: The vendor states that this is not a vulnerability. WP All… |
CVE-2018-0547 | Medium | 6.1 | 2018-03-09 | Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web script or HTML via u… |
CVE-2018-0546 | Medium | 6.1 | 2018-03-09 | Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web script or HTML via u… |
CVE-2021-24714 | Medium | 4.8 | 2021-12-06 | The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin… |