145 matches found
CVE-2015-9331
CVE-2015-9331 POC 취약점 설명 CVE-2015-9331은 WordPress 플러그인 WP All Import의 임의 파일 업로드 취약점입니다. 이 취약점은 인증되지 않은 공격자가 서버에 임의 파일을 업로드할 수 있게 하여 원격 코드 실행으로 이어질 수 있습니다. 영향 범위 플러그인 이름 : WP All Import 영향 버전 : = 3.2.3 취약점 유형 : 임의 파일 업로드 / 원격 코드 실행 CVE 번호 : CVE-2015-9331 파일 설명 poc.py - Python 취약점 익스플로잇 스크립트...
CVE-2022-1565
WordPress Plugin WP All Import = 3.6.7 - 원격 코드 실행 RCE 인증됨 Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm: https://wordpress.org/plugins/wp-all-import/advanced/ kéo xuống chọn phiên...
PT-2026-52799
Administrator SQL Injection in WP All Import = 4.0.1 versions...
CVE-2026-57628: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WP All Import = 4.0.1 versions...
CVE-2026-2830
The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possib...
CVE-2026-2830
WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets (WordPress plugin) is listed as vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in versions up to and including 4.0.0 due to insufficient input sanitization and output escaping. The CVE notes unauthen...
CVE-2026-2830 WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'
The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possib...
CVE-2026-2830: Improper Control of Generation of Code
The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possib...
CVE-2017-18567
The wp-all-import plugin before 3.4.6 for WordPress has XSS...
CVE-2025-12733
The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...
CVE-2025-12733
CVE-2025-12733 affects the WordPress plugin Import any XML, CSV or Excel File to WordPress (WP All Import) up to version 3.9.6. The issue is an authenticated (Administrator+) Remote Code Execution via crafted import templates, caused by the use of eval() on unsanitized input in pmxi_if within hel...
CVE-2025-12733: Improper Control of Generation of Code
The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...
WordPress Import any XML, CSV or Excel File to WordPress (WP All Import) plugin <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic vulnerability
Authenticated Administrator+ Remote Code Execution via Conditional Logic vulnerability discovered by tmrswrr in WordPress Plugin WP All Import versions = 3.9.6...
EUVD-2018-13514
Malware in sbrugna...
EUVD-2018-1364
Malware in sbrugna...
EUVD-2018-1363
Malware in sbrugna...
EUVD-2017-9683
Malware in sbrugna...
EUVD-2024-53887
Malicious code in bioql PyPI...