161 matches found
WordPress wp-all-import plugin security feature issue vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. WordPress wp-all-import plugin has a security feature issue...
WordPress wp-all-import plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. A SQL injection vulnerability exists in the WordPress wp-all-import...
WordPress wp-all-import plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-all-import is an XML, CSV file import plugin used in it. A cross-site scripting vulnerability exists in WordPress wp-all-import...
CVE-2018-20978
The wp-all-import plugin before 3.4.7 for WordPress has XSS...
CVE-2018-20978
The wp-all-import plugin before 3.4.7 for WordPress has XSS...
Cross site scripting
The wp-all-import plugin before 3.4.7 for WordPress has XSS...
CVE-2015-9330
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...
CVE-2015-9329
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS...
CVE-2015-9331
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit...
CVE-2017-18567
The wp-all-import plugin before 3.4.6 for WordPress has XSS...
Sql injection
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...
Cross site scripting
The wp-all-import plugin before 3.4.6 for WordPress has XSS...
Code injection
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit...
CVE-2018-20978
CVE-2018-20978 affects the WordPress wp-all-import plugin for versions prior to 3.4.7. The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient validation of client-supplied data in the plugin, enabling an attacker to run malicious script in a victim’s browser. Public records...
CVE-2017-18567
The wp-all-import plugin before 3.4.6 for WordPress has XSS...
CVE-2017-18567
CVE-2017-18567 affects the WordPress wp-all-import plugin prior to 3.4.6, where an XSS vulnerability exists in input handling due to lack of proper validation of client-side data. This could allow attacker-controlled script execution when processing imported XML/CSV data. A fix is available in ve...
CVE-2015-9329
The CVE-2015-9329 entry concerns the WordPress plugin wp-all-import . It states that versions before 3.2.5 are vulnerable to reflected XSS . Product: WordPress plugin wp-all-import; Impact: user input reflected in responses leading to XSS; Root cause: improper sanitization/escaping in the affecte...
CVE-2015-9330
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection...
CVE-2015-9330
The CVE-2015-9330 entry concerns the WordPress plugin wp-all-import, with a blind SQL injection vulnerability reported in versions before 3.2.5. Public sources (NVD, Red Hat, CNVD, CVE lists) consistently describe a SQL injection flaw in this plugin, aligned with a high/critical risk profile (CVS...