14741 matches found
CVE-2025-64382 WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-import-export-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Export & Order Import for WooCommerce: from n/a through = 2.6.7...
CVE-2025-64382
CVE-2025-64382 affects the WordPress plugin Order Export & Order Import for WooCommerce (versions through 2.6.7). The issue is Missing Authorization/Broken Access Control due to incorrectly configured access control security levels, enabling unauthorized access to the plugin’s order-export/import...
CVE-2025-12733
The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...
CVE-2025-12733 Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic
The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...
EUVD-2025-150407
The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...
CVE-2025-12733
CVE-2025-12733 affects the WordPress plugin Import any XML, CSV or Excel File to WordPress (WP All Import) up to version 3.9.6. The issue is an authenticated (Administrator+) Remote Code Execution via crafted import templates, caused by the use of eval() on unsanitized input in pmxi_if within hel...
CVE-2025-12733 Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic
The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...
EUVD-2025-178447
Malicious code in import-float-omega-user-eta npm...
EUVD-2025-175549
Malicious code in wind-sun-stub-function-import npm...
EUVD-2025-179759
Malicious code in char-hot-import-public-process npm...
EUVD-2025-178444
Malicious code in import-proxy-cron-balance-abstract npm...
EUVD-2025-175865
Malicious code in try-import-fork-socket-beta npm...
EUVD-2025-177475
Malicious code in old-import-decode-table-process npm...
EUVD-2025-177042
Malicious code in process-float-sanitize-module-import npm...
EUVD-2025-180439
Malicious code in analyze-boolean-pipe-import-epsilon npm...
EUVD-2025-177434
Malicious code in optimize-cache-static-orchestrate-import npm...
EUVD-2025-178442
Malicious code in import-uglify-shell-assert-key npm...
EUVD-2025-178448
Malicious code in import-debug-compress-byte-long npm...