WordPress Plugin Vulnerabilities | Page 14 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

import-users-from-csv-with-meta

Published

2020-01-01

Title

Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export

Slug

import-users-from-csv-with-meta

Published

2020-11-20

Title

Import and export users and customers < 1.16.3.6 - CSV Injection

Slug

import-users-from-csv-with-meta

Published

2022-04-11

Title

Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2022-10-17

Title

Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

Slug

import-users-from-csv-with-meta

Published

2023-12-11

Title

Import and export users and customers < 1.24.4 - Contributor+ Stored XSS

Slug

import-users-from-csv-with-meta

Published

2023-12-08

Title

Import and export users and customers < 1.24.3 - Admin+ Arbitrary File Read/Deletion

Slug

import-users-from-csv-with-meta

Published

2024-01-16

Title

Import and export users and customers < 1.24.7 - Missing Authorization via fire_cron REST endpoint

Slug

import-users-from-csv-with-meta

Published

2024-04-22

Title

Import and export users and customers < 1.26.3 - Authenticated (Admin+) PHP Object Injection

Slug

import-users-from-csv-with-meta

Published

2024-05-03

Title

Import and export users and customers < 1.26.6 - Missing Authorization

Slug

import-users-from-csv-with-meta

Published

2024-05-14

Title

Import and export users and customers < 1.26.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2024-05-14

Title

Import and export users and customers < 1.26.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2024-08-07

Title

Import and export users and customers < 1.26.9 - Unauthenticated Information Exposure

Slug

import-users-from-csv-with-meta

Published

2024-10-24

Title

Import and export users and customers < 1.27.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2025-01-27

Title

Import and export users and customers < 1.27.13 - Unauthenticated Sensitive Information Disclosure

Slug

import-users-to-mailchimp

Published

2025-01-16

Title

Import Users to MailChimp <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

import-woocommerce

Published

2016-02-24

Title

Import Woocommerce < 1.1 - Reflected Cross-Site Scripting (XSS)

Slug

import-xml-feed

Published

2021-04-13

Title

Import XML and RSS Feeds < 2.0.3 - Authenticated Server-side Request Forgery (SSRF)

Slug

import-xml-feed

Published

2023-08-28

Title

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

Slug

import-xml-feed

Published

2023-08-28

Title

Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload

Slug

import-xml-feed

Published

2024-04-05

Title

Import XML and RSS Feeds < 2.1.6 - Authenticated (Administrator+) Arbitrary File Upload

Slug

import-youtube-videos-as-wp-post

Published

2025-06-19

Title

Import YouTube videos as WP Posts <= 2.1 - Missing Authorization

Slug

Published

2023-12-01

Title

Importify < 1.0.5 - Unauthenticated Sensitive Information Exposure

Slug

Published

2023-12-26

Title

Impreza < 8.18 - Reflected Cross-Site Scripting

Slug

improve-my-city

Published

2025-03-18

Title

Improve My City <= 1.6 - Unauthenticated Stored Cross-Site Scripting

Slug

improved-include-page

Published

2021-11-15

Title

Improved Include Page <= 1.2 - Contributor+ Arbitrary Posts/Pages Access