WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options

Description

The plugin does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users whose role an administrator has granted the plugin's import permission to perform SQL injection attacks.