CVE-2015-9331

CVE-2015-9331 POC 漏洞描述 CVE-2015-9331 是 WordPress 插件 WP All Import 中的一个任意文件上传漏洞。该漏洞允许未经身份验证的攻击者上传任意文件到服务器，可能导致远程代码执行。 影响范围 插件名称 : WP All Import 影响版本 : = 3.2.3 漏洞类型 : 任意文件上传 / 远程代码执行 CVE编号 : CVE-2015-9331 文件说明 poc.py - Python 漏洞利用脚本 shell.php - 用于演示的 PHP Webshell 使用方法 环境要求 pip install requests 运行...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - 远程代码执行 RCE 已验证 日期：2023年11月5日 利用作者：Việt HÙng https://github.com/phanthibichtram12 供应商主页：https://www.wpallimport.com/ 软件链接：https://wordpress.org/plugins/wp-all-import/advanced/ 向下滚动选择版本 版本：= 3.6.7 已测试：3.6.7 测试环境：WordPress 6.1 不依赖操作系统，因为此利用不提供载荷...

PT-2026-52799

Administrator SQL Injection in WP All Import = 4.0.1 versions...

CVE-2026-57628: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WP All Import = 4.0.1 versions...

CVE-2026-2830

The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-2830

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets (WordPress plugin) is listed as vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in versions up to and including 4.0.0 due to insufficient input sanitization and output escaping. The CVE notes unauthen...

CVE-2026-2830 WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'

The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-2830: Improper Control of Generation of Code

The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ parameter in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2017-18567

The wp-all-import plugin before 3.4.6 for WordPress has XSS...

CVE-2025-12733

The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...

CVE-2025-12733

CVE-2025-12733 affects the WordPress plugin Import any XML, CSV or Excel File to WordPress (WP All Import) up to version 3.9.6. The issue is an authenticated (Administrator+) Remote Code Execution via crafted import templates, caused by the use of eval() on unsanitized input in pmxi_if within hel...

CVE-2025-12733: Improper Control of Generation of Code

The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. This is due to the use of eval on unsanitized user-supplied input in the pmxiif function within helpers/functions.php. This mak...

WordPress Import any XML, CSV or Excel File to WordPress (WP All Import) plugin <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic vulnerability

Authenticated Administrator+ Remote Code Execution via Conditional Logic vulnerability discovered by tmrswrr in WordPress Plugin WP All Import versions = 3.9.6...

EUVD-2018-1364

Malware in sbrugna...

EUVD-2018-13514

Malware in sbrugna...

EUVD-2018-1363

Malware in sbrugna...

EUVD-2017-9683

Malware in sbrugna...

EUVD-2024-30249

Malicious code in bioql PyPI...

EUVD-2024-53887

Malicious code in bioql PyPI...

CVE-2024-32431

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2...