WordPress Plugin Vulnerabilities | Page 14 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

import-shopify-to-woocommerce

Published

2022-11-10

Title

S2W - Import Shopify to WooCommerce < 1.1.13 - Admin+ Arbitrary File Access

Slug

import-social-statistics

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

import-social-statistics

Published

2019-02-26

Title

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

Slug

import-social-statistics

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

import-spreadsheets-from-microsoft-excel

Published

2023-11-23

Title

Import Spreadsheets from Microsoft Excel < 10.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

import-spreadsheets-from-microsoft-excel

Published

2024-07-11

Title

Import Spreadsheets from Microsoft Excel < 10.1.5 - Authenticated (Editor+) Arbitrary File Upload

Slug

import-users-from-csv

Published

2024-04-12

Title

Import Users from CSV < 1.3 - Authenticated (Admin+) PHP Object Injection

Slug

import-users-from-csv-with-meta

Published

2018-12-11

Title

Import users from CSV with meta <= 1.12 - Import Cross-Site Scripting (XSS)

Slug

import-users-from-csv-with-meta

Published

2019-03-14

Title

Import users from CSV with meta <= 1.14.0.2 - XSS and CSRF

Slug

import-users-from-csv-with-meta

Published

2019-06-20

Title

Import users from CSV with meta <= 1.14.1.2 - XSS

Slug

import-users-from-csv-with-meta

Published

2019-06-22

Title

Import users from CSV with meta < 1.14.2.2 - CSRF leading to attachment deletion & Path Traversal

Slug

import-users-from-csv-with-meta

Published

2020-01-01

Title

Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export

Slug

import-users-from-csv-with-meta

Published

2020-11-20

Title

Import and export users and customers < 1.16.3.6 - CSV Injection

Slug

import-users-from-csv-with-meta

Published

2022-04-11

Title

Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2022-10-17

Title

Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

Slug

import-users-from-csv-with-meta

Published

2023-12-11

Title

Import and export users and customers < 1.24.4 - Contributor+ Stored XSS

Slug

import-users-from-csv-with-meta

Published

2023-12-08

Title

Import and export users and customers < 1.24.3 - Admin+ Arbitrary File Read/Deletion

Slug

import-users-from-csv-with-meta

Published

2024-01-16

Title

Import and export users and customers < 1.24.7 - Missing Authorization via fire_cron REST endpoint

Slug

import-users-from-csv-with-meta

Published

2024-04-22

Title

Import and export users and customers < 1.26.3 - Authenticated (Admin+) PHP Object Injection

Slug

import-users-from-csv-with-meta

Published

2024-05-03

Title

Import and export users and customers < 1.26.6 - Missing Authorization

Slug

import-users-from-csv-with-meta

Published

2024-05-14

Title

Import and export users and customers < 1.26.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2024-05-14

Title

Import and export users and customers < 1.26.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2024-08-07

Title

Import and export users and customers < 1.26.9 - Unauthenticated Information Exposure

Slug

import-users-from-csv-with-meta

Published

2024-10-24

Title

Import and export users and customers < 1.27.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2025-01-27

Title

Import and export users and customers < 1.27.13 - Unauthenticated Sensitive Information Disclosure