WordPress Plugin Vulnerabilities | Page 13 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

import-export-for-woocommerce

Published

2024-12-06

Title

Import Export For WooCommerce <= 1.6.2 - Subscriber+ Arbitrary File Upload

Slug

import-export-for-woocommerce

Published

2025-05-16

Title

Import Export For WooCommerce <= 1.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

import-export-for-woocommerce

Published

2025-11-03

Title

Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Slug

import-export-with-custom-rest-api

Published

2025-06-12

Title

REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function

Slug

import-external-attachments

Published

2025-06-27

Title

Import external attachments <= 1.5.12 - Cross-Site Request Forgery

Slug

import-external-attachments

Published

2025-12-14

Title

Import external attachments <= 1.5.12 - Missing Authorization

Slug

import-external-images

Published

2023-03-16

Title

Import External Images <= 1.4 - CSRF

Slug

import-facebook-events

Published

2025-05-19

Title

Import Social Events < 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

import-from-yml

Published

2025-04-14

Title

Import from YML < 4.0.0 - Reflected Cross-Site Scripting

Slug

import-holded-products-woocommerce

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

import-holded-products-woocommerce

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

import-legacy-media

Published

2014-04-25

Title

Import Legacy Media <= 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Slug

import-products-to-wc

Published

2025-06-25

Title

Amazon Products to WooCommerce <= 1.2.7 - Missing Authorization to Unauthenticated Arbitrary Product Creation

Slug

import-products-to-wc

Published

2025-07-01

Title

Amazon Products to WooCommerce <= 1.2.7 - Unauthenticated Server-Side Request Forgery

Slug

import-shopify-to-woocommerce

Published

2022-11-10

Title

S2W - Import Shopify to WooCommerce < 1.1.13 - Admin+ Arbitrary File Access

Slug

import-social-statistics

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

import-social-statistics

Published

2019-02-26

Title

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

Slug

import-social-statistics

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

import-spreadsheets-from-microsoft-excel

Published

2023-11-23

Title

Import Spreadsheets from Microsoft Excel < 10.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

import-spreadsheets-from-microsoft-excel

Published

2024-07-11

Title

Import Spreadsheets from Microsoft Excel < 10.1.5 - Authenticated (Editor+) Arbitrary File Upload

Slug

import-users-from-csv

Published

2024-04-12

Title

Import Users from CSV < 1.3 - Authenticated (Admin+) PHP Object Injection

Slug

import-users-from-csv-with-meta

Published

2018-12-11

Title

Import users from CSV with meta <= 1.12 - Import Cross-Site Scripting (XSS)

Slug

import-users-from-csv-with-meta

Published

2019-03-14

Title

Import users from CSV with meta <= 1.14.0.2 - XSS and CSRF

Slug

import-users-from-csv-with-meta

Published

2019-06-20

Title

Import users from CSV with meta <= 1.14.1.2 - XSS

Slug

import-users-from-csv-with-meta

Published

2019-06-22

Title

Import users from CSV with meta < 1.14.2.2 - CSRF leading to attachment deletion & Path Traversal