Wpallimport

Wp All Import

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2024-32431

  • EPSS 0.42%
  • Published 15.04.2024 08:15:15
  • Last modified 02.04.2025 15:07:08

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.

7.2

CVE-2022-1565

  • EPSS 49.05%
  • Published 18.07.2022 17:15:08
  • Last modified 21.11.2024 06:40:58

The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with administrator...