Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:import_all_xml,_csv_&_txt_into_wordpress:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductImport All Xml, Csv & Txt Into Wordpress (70ae6b98-86cd-53a4-b6d4-134d26b77dec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3244 vulnerable 2026-06-08 05:47:19.785850 Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation
The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-13T15:55:04.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3243 vulnerable 2026-06-08 05:47:19.784400 Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi
The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin
Published: 2022-10-17T00:00:00.000Z
Updated: 2025-05-14T20:17:07.691Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.