Wpallimport

5 CVEs across 2 Wpallimport products. Browse Wpallimport vulnerabilities, severities, and proof-of-concept exploits.

Wpallimport products with known CVEs

ProductCVEs
Wp All Import – Drag & Drop Import For Csv, XML, Excel & Google Sheets4
Wp All Import2
Wpallimport CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2830Medium6.12026-03-06The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepa…
CVE-2025-12733High8.82025-11-13The Import any XML, CSV or Excel File to WordPress (WP All Import) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and inclu…
CVE-2025-10001High7.22025-09-10The Import any XML, CSV or Excel File to WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the impo…
CVE-2024-32431Medium4.42024-04-15Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.
CVE-2022-1565High7.22022-07-18The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, a…