WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Import All Pages, Post types, Products, Orders, and Users as XML & CSV

2022-09-20
Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi
Fixed in version 6.5.8
2022-09-20
Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation
Fixed in version 6.5.8
2022-06-02
WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRF
Fixed in version 6.5.3
2022-01-26
WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting
Fixed in version 6.4.3
2022-01-17
WP Ultimate CSV Importer < 6.4.2 - Subscriber+ Arbitrary Option Deletion
Fixed in version 6.4.2
2022-01-12
WP Ultimate CSV Importer < 6.4.1 - Subscriber+ Arbitrary File Upload
Fixed in version 6.4.1
2018-12-19
WP Ultimate CSV Importer <= 5.6 - CSRF
Fixed in version 5.6.1
2016-01-27
WP Ultimate CSV Importer <= 3.8.6 - Reflected Cross-Site Scripting (XSS)
Fixed in version 3.8.8
2015-08-18
WP Ultimate Csv Importer < 3.8.1 - XSS
Fixed in version 3.8.1
2015-04-27
WP Ultimate CSV Importer < 3.7.1 - Directory Traversal
Fixed in version 3.7.1
2015-02-22
WP Ultimate CSV Importer <= 3.6.74 - Database Table Export
Fixed in version 3.6.75