Import WP vulnerabilities

2 known vulnerabilities in Import WP from Importwp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Import WP – Export and Import CSV and XML…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-13562Jan 25, 2025Jcollings

  The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers t

• 7.2 High severity

  Import WP – Import and Export WordPress data…: Unrestricted Upload of File with Dangerous Type

  CVE-2022-1273May 2, 2022Import WP – Import and Export WordPress data to XML or CSV filesEPSS 1.47%

  The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files (such as PHP), leading to RCE