WordPress security by component

WordPress Importer

Plugin description

WordPress Importer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 26, 2025; the highest CVE/CNA score is 7.2.

Plugin slug: wordpress-importer

Latest vulnerability

CVE-2024-13889: WordPress Importer: Code execution

WordPress Importer is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedMar 26, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 26, 2025	CVE-2024-13889 WordPress Importer: Code execution WordPress Importer is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.2 NVDPending