WordPress security by component
Import any XML or CSV File to
Plugin description
Import any XML or CSV File to is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jan 22, 2024; the highest CVE/CNA score is 8.8.
Plugin slug:
export-any-wordpress-data-to-xml-csvLatest vulnerability
CVE-2023-7082: Import any XML or CSV File to: Code execution
Import any XML or CSV File to is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
| Safe version |
|
||
|---|---|---|---|
| Jan 22, 2024 |
CVE-2023-7082
Import any XML or CSV File to: Code execution
Import any XML or CSV File to is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE7.2
NVD7.2
|
| Dec 18, 2023 |
CVE-2023-5886
Export any WordPress data to XML/CSV: Code execution
Export any WordPress data to XML/CSV is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Dec 18, 2023 |
CVE-2023-5882
Export any WordPress data to XML/CSV: Code execution
Export any WordPress data to XML/CSV is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Dec 18, 2023 |
CVE-2023-4724
Export any WordPress data to XML/CSV: A security weakness
Export any WordPress data to XML/CSV is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.2
NVD7.2
|
| Jun 13, 2022 |
CVE-2022-1800
Export any WordPress data to XML/CSV: SQL injection
Export any WordPress data to XML/CSV is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVD7.2
|