WordPress Advanced Importer Plugin <= 2.1.1 - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because “alertmsg” parameter is not sanitized. Solution Update the plugin...

WP Advanced Importer Plugin <= 2.1.1 - Reflected Cross-Site Scripting (XSS)

The WP Advanced Importer WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Ultimate CSV Importer Plugin <= 3.8.6 - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because "alertmsg" parameter is not sanitized. Solution Update the plugin...

WordPress Ultimate CSV Importer 3.8.6 Cross Site Scripting

FULL DISCLOSURE Product : WP-Ultimate CSV Importer Exploit Author : Rahul Pratap Singh Version : 3.8.6 Home page Link : https://wordpress.org/plugins/wp-ultimate-csv-importer Website Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date Date : 27/Jan/201...

WP Ultimate CSV Importer <= 3.8.6 - Reflected Cross-Site Scripting (XSS)

The Import and Export WordPress Data as CSV or XML WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Magmi (Magento Mass Importer) Detection (HTTP)

HTTP based detection of Magmi Magento Mass Importer. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Drupal Open Graph Importer Module Limit Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP. open Graph Importer is a module that supports back-end administrators or other users to import content from other websites using open graph meta tags. A security vulnerability exists in the Drupal Open Graph Importer module...

CVE-2015-4389

The Open Graph Importer ogtagimporter 7.x-1.x for Drupal does not properly check the create permission for content types created during import, which allows remote authenticated users to bypass intended restrictions by leveraging the "import ogtagimporter" permission...

Open redirect

The Open Graph Importer ogtagimporter 7.x-1.x for Drupal does not properly check the create permission for content types created during import, which allows remote authenticated users to bypass intended restrictions by leveraging the "import ogtagimporter" permission...

CVE-2015-4389

The CVE concerns the Drupal contributed module Open Graph Importer (og_tag_importer) in the 7.x-1.x line. The root cause is improper enforcement of the create permission on destination content types during import, enabling remote authenticated users with the import_og_tag_importer permission to b...

CVE-2015-4389

The Open Graph Importer ogtagimporter 7.x-1.x for Drupal does not properly check the create permission for content types created during import, which allows remote authenticated users to bypass intended restrictions by leveraging the "import ogtagimporter" permission...

WP Ultimate CSV Importer < 3.7.1 - Directory Traversal

The Import and Export WordPress Data as CSV or XML WordPress plugin was affected by a Directory Traversal security vulnerability...

WordPress Ultimate CSV Importer Plugin <= 3.7.0 - Directory Traversal

Because of this vulnerability, the attackers can read files on the filesystem without authorization. Solution Update the plugin...

Open Graph Importer - Moderately Critical - Access bypass - Unsupported - SA-CONTRIB-2015-092

This module enables you to import content from a web page by scraping its Open Graph data. The module doesn't sufficiently check for "create" permission to the content type that is configured as the destination for imported content, thus allowing a user with the "import ogtagimporter" permission ...

WordPress Aspose Importer / Exporter 1.0 File Download

Exploit Title : Wordpress Aspose Importer & Exporter v1.0 Plugin File Download Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/aspose-importer-exporter/ Download Link :...

Aspose Importer & Exporter 1.0 - Arbitrary File Download

The Aspose Importer & Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WordPress Aspose Importer & Exporter Plugin <= 1.0 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

WordPress Aspose Importer & Exporter Plugin <= 1.0 - Arbitrary File Download

This plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

WP Ultimate CSV Importer <= 3.6.74 - Database Table Export

Due to lack of verification of a visitors permissions, it is possible to execute the ‘export.php’ script included in the default installation of this plugin, and retrieve the full contents of the user table in the WordPress installation. This results in full disclosure of usernames, hashed...

WordPress Ultimate CSV Importer Plugin <= 3.6.74 Information Disclosure

Because of this vulnerability, remote attackers can disclose usernames, hashed passwords and email addresses for all users. Solution Update the plugin...