Medium
CVE-2026-57628
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filters
Medium
CVE-2026-2830
WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'
High
CVE-2025-12733
Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic
High
CVE-2025-10001
Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload
Medium
CVE-2024-9661
WP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion
High
CVE-2024-9664
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
Medium
CVE-2024-8722
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9624
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
High
CVE-2023-7082
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2022-3418
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2022-2711
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
Medium
CVE-2022-2268
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload
High
CVE-2022-1565
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
Critical
CVE-2022-36386
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution
Medium
6c06b79a-0803-4973-ba88-b97d7145f82b
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting
Low
CVE-2014-2054
Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)
Medium
CVE-2021-24714
Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting
High
7e4e1afd-604d-45c2-ab6b-fa9ccac0c361
All Import Pro Plugin < 4.1.2 - SQL injection
Medium
6aae5b1d-9b84-4628-b0b6-7b39054e08a0
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
High
52d390e0-95ca-4570-8d4c-f679ee86ffea
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
Medium
404aabc5-1ff4-492d-8cab-4b83eb68157a
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting
High
CVE-2015-9331
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
Medium
CVE-2018-0547
WP All Import <= 3.4.6 - Cross-Site Scripting
Medium
CVE-2018-0546
WP All Import <= 3.4.5 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.