Plugin icon

Import WP – CSV & XML Import Export for WordPress

jc-importer

Vulnerabilities:

6

Last Updated:

October 8, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-08-10
Title
Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download
Fixed in
Fixed in 2.14.23
CVSS
5.9 (medium)
Published
2025-11-20
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.18 - Unauthenticated Information Exposure
Fixed in
Fixed in 2.14.18
CVSS
5.3 (medium)
Published
2025-10-31
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.17 - Authenticated (Admin+) Arbitrary File Read
Fixed in
Fixed in 2.14.17
CVSS
4.9 (medium)
Published
2025-01-24
Title
Import WP – Export and Import CSV and XML files to WordPress < 2.14.6 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Fixed in
Fixed in 2.14.6
CVSS
7.5 (high)
Published
2024-04-03
Title
Import WP < 2.13.1 - Admin+ Server-side Request Forgery
Fixed in
Fixed in 2.13.1
CVSS
4.1 (medium)
Published
2022-04-11
Title
Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE
Fixed in
Fixed in 2.4.6
CVSS
6.6 (medium)