WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability

🗓️ 10 Apr 2024 14:00:28Reported by Dhabaleshwar Das (Patchstack Alliance)Type

CSRF in WordPress WP All Import plugin versions up to 3.7.3, discovered by Patchstack.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin Import any XML or CSV File to WordPress 安全漏洞	10 Apr 202400:00	–	cnnvd
CVE	CVE-2024-31939	10 Apr 202419:17	–	cve
Cvelist	CVE-2024-31939 WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability	10 Apr 202419:17	–	cvelist
EUVD	EUVD-2024-29797	3 Oct 202520:07	–	euvd
NVD	CVE-2024-31939	10 Apr 202420:15	–	nvd
Patchstack	WordPress Import any XML or CSV File to WordPress Plugin <= 3.7.3 is vulnerable to Cross Site Request Forgery (CSRF)	10 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-24303 · WordPress · Soflyy Import Any Xml/Csv File To Wordpress	10 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-31939	23 May 202507:39	–	redhatcve
Vulnrichment	CVE-2024-31939 WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability	10 Apr 202419:17	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)	18 Apr 202415:58	–	wordfence

Vulners

Node

10 Apr 2024 14:00Current

7High risk

Vulners AI Score7

CVSS 3.14.3

EPSS0.00162

SSVC