CVE-2018-20978

Description

References

• wordpress.org/plugins/wp-all-import · Release Notes

More vulnerabilities in wp all import

• CVE-2024-9664HIGH 7.2The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserializa…
• CVE-2022-3418HIGH 7.2The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported o…
• CVE-2022-2711HIGH 7.2The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, all…
• CVE-2022-36386HIGH 7.2Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.
• CVE-2022-2268HIGH 7.2The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without valida…