WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-all-export
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
Slug
wp-all-export-pro
Published
2022-10-03
Title
WP ALL Export Pro < 1.7.9 - Authenticated Code Injection
Slug
wp-all-export-pro
Published
2022-10-03
Title
WP ALL Export Pro < 1.7.9 - Authenticated SQLi
Slug
wp-all-export-pro
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
Slug
wp-all-export-pro
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
Slug
wp-all-export-pro
Published
2023-11-21
Title
WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE
Slug
wp-all-export-pro
Published
2025-02-07
Title
WP All Export Pro < 1.9.2 - Unauthenticated Remote Code Execution via Custom Export Fields
Slug
wp-all-export-pro
Published
2025-02-07
Title
WP All Export Pro < 1.9.2 - Authenticated (ShopManager+) Arbtirary Options Update
Slug
wp-all-import
Published
2015-02-26
Title
Import any XML or CSV File to WordPress <= 3.2.3 - RCE
Slug
wp-all-import
Published
2015-03-17
Title
Import any XML or CSV File to WordPress <= 3.2.4 - Multiple Vulnerabilities
Slug
wp-all-import
Published
2017-10-08
Title
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting (XSS)
Slug
wp-all-import
Published
2018-03-08
Title
Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting (XSS)
Slug
wp-all-import
Published
2018-03-08
Title
Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting (XSS)
Slug
wp-all-import
Published
2021-11-02
Title
WP All Import < 3.6.3 - Admin+ Stored Cross-Site Scripting
Slug
wp-all-import
Published
2021-12-07
Title
WP All Import < 3.6.5 - Reflected Cross-Site Scripting
Slug
wp-all-import
Published
2022-07-01
Title
WP All Import < 3.6.8 - Admin+ Arbitrary File Upload
Slug
wp-all-import
Published
2022-06-28
Title
Import any XML or CSV File to WordPress < 3.6.8 - Admin+ Arbitrary Code Execution
Slug
wp-all-import
Published
2022-10-14
Title
WP All Import < 3.6.9 - Admin+ Directory traversal via file upload
Slug
wp-all-import
Published
2022-10-14
Title
WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE
Slug
wp-all-import
Published
2023-12-29
Title
WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE
Slug
wp-all-import
Published
2025-09-09
Title
Import any XML, CSV or Excel File to WordPress < 3.9.4 - Admin+ Limited Unsafe File Upload
Slug
wp-all-import
Published
2025-11-12
Title
Import any XML, CSV or Excel File to WordPress < 4.0.0 - Admin+ Remote Code Execution via Conditional Logic
Slug
wp-all-import-pro
Published
2015-02-26
Title
WP All Import Pro <= 4.1.0 - RCE
Slug
wp-all-import-pro
Published
2015-03-17
Title
WP All Import Pro <= 4.1.1 - Multiple Vulnerabilities
Slug
wp-all-import-pro
Published
2024-12-16
Title
WP All Import Pro < 4.9.4 - Authenticated (Administrator+) Server-Side Request Forgery via File Import