CVE-2024-32431

HIGH 7.2CVE-2024-32431 · Published 15/04/2024 · updated 17/06/2026

In short

CVE-2024-32431 is a HIGH (CVSS 7.2) vulnerability affecting wp all import (wpallimport).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.5% of all vulnerabilities.
Fix: update to 1.3 or later.

Package	Affected versions	Patched versions
wp all import wpallimport	`< 1.3`	`1.3`

Description

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.

References

patchstack.com/database/vulnerability/import-users-from-csv/wordpress-import-users-from-csv-plugin-1-2-php-object-injection · Third Party Advisory

More vulnerabilities in wp all import

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free