Skip to contentWpallimport Wp All Import – Drag & Drop Import For Csv, Xml, Excel & Google Sheets vulnerabilities
- wpallimport wp all import – drag & drop import for csv, xml, excel & google sheetsWP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'CVE-2026-28306.1 Medium
- wpallimport wp all import – drag & drop import for csv, xml, excel & google sheetsImport any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional LogicCVE-2025-127338.8 High
- wpallimport wp all import – drag & drop import for csv, xml, excel & google sheetsImport any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File UploadCVE-2025-100017.2 High
- wpallimport wp all import, wp all import – drag & drop import for csv, xml, excel & google sheets +1 moreImport any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File UploadCVE-2022-1565Public exploitEPSS 15.2%7.2 High