WP All Import Pro vulnerabilities

2 known vulnerabilities in WP All Import Pro from Soflyy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WP All Import Pro: Deserialization of Untrusted Data

  CVE-2024-9664Feb 7, 2025Soflyy

  The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserialization of untrusted input from an import file. This makes it possible for authenticated attackers, with Administrator-leve

• 7.6 High severity

  WP All Import Pro: Server-Side Request Forgery

  CVE-2024-9624Dec 17, 2024Soflyy

  The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxi_curl_download function. This makes it possible for authenticated attackers, with Admi