WP Import – Ultimate CSV XML Importer for WordPress vulnerabilities
1 known vulnerability in WP Import – Ultimate CSV XML Importer for WordPress from Smackcoders. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
WP Import – Ultimate CSV XML Importer for…: Improper Control of Generation of Code
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.28. This is due to the write_to_customfile() function writing unfiltered PHP code to a file. This makes