Wpallimport vulnerabilities

Products

• Wp All Import – Drag & Drop Import For Csv, Xml, Excel & Google Sheets 4
• Wp All Import 2

Newest

• wpallimport wp all import – drag & drop import for csv, xml, excel & google sheets WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath' CVE-2026-2830 6.1 MediumMarch 6, 2026
• wpallimport wp all import – drag & drop import for csv, xml, excel & google sheets Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic CVE-2025-12733 8.8 HighNovember 13, 2025
• wpallimport wp all import – drag & drop import for csv, xml, excel & google sheets Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload CVE-2025-10001 7.2 HighSeptember 10, 2025
• wp all import import users from csv, wpallimport wp all import +1 more WordPress Import Users from CSV plugin <= 1.2 - PHP Object Injection CVE-2024-32431 4.4 MediumApril 15, 2024
• wpallimport wp all import, wp all import – drag & drop import for csv, xml, excel & google sheets +1 more Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload CVE-2022-1565 Public exploit EPSS 15.2% 7.2 HighJuly 18, 2022