Import WP vulnerabilities
We track 1 vulnerability in Import WP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Import WP vulnerabilities
- 7.5 High severity
Import WP: Exposure of Sensitive Information to an Unauthorized Actor
The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file download handlers, allowing unauthenticated attackers to download export files generated by administrators, which may contain user personal data su