WordPress Plugin Vulnerabilities

WP All Import Pro <= 4.1.1 - Multiple Vulnerabilities

Description

Multiple issues were fixed, such as Authenticated SQL Injection, Authenticated Reflected XSS and Unauthorised access to some methods.

Affects Plugins

Plugin icon
wp-all-import-pro
Fixed in 4.1.2

References

URL
http://www.wpallimport.com/2015/03/wp-import-4-1-2-security-update/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
49740ee8-ba7d-4a9f-9356-a5f13e753c36

Timeline

Publicly Published
2015-03-17 (about 9 years ago)
Added
2015-03-17 (about 9 years ago)
Last Updated
2020-10-20 (about 3 years ago)

Other

Published
Title
Published
2009-11-25
Title
WP-Cumulus < 1.23 - Vulnerabilities
Published
2020-03-23
Title
WPvivid Backup < 0.9.36 - Missing Authorization Leading To Database Leak
Published
2019-08-10
Title
Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Multiple Issues
Published
2015-09-04
Title
Memphis Documents Library < 3.0 - Multiple Issues
Published
2020-06-15
Title
KingComposer < 2.9.4 - Multiple Critical Issues