Medium
CVE-2024-9661
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filters
High
CVE-2024-9664
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
Medium
CVE-2024-8722
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2024-9624
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
High
7e4e1afd-604d-45c2-ab6b-fa9ccac0c361
All Import Pro Plugin < 4.1.2 - SQL injection
Medium
6aae5b1d-9b84-4628-b0b6-7b39054e08a0
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
High
52d390e0-95ca-4570-8d4c-f679ee86ffea
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
Medium
404aabc5-1ff4-492d-8cab-4b83eb68157a
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting
High
CVE-2015-9331
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
Medium
CVE-2015-9329
Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.