CVE-2018-16255

creationtimestamp| type| source ---|---|--- 2019-04-15 14:39:14+00:00| seen| https://t.me/cibsecurity/3706...

CVE-2018-16255

WP All Import plugin for WordPress, version 3.4.9, is associated with a cross-site scripting vulnerability via the endpoint action=evaluate. Exploitation appears to require a logged-in administrator; vendor dispute exists regarding the issue. No patch/version fix details are provided in the inclu...