WP All Import

Products

ProductCVEsExploitedLatest
WP All Export Pro2–Feb 7, 2025
Import Users from CSV1–Apr 15, 2024
WP All Import1–Jun 26, 2026

Exploited and recent CVEs

  • CVE-2026-57628 High 7.6 WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability 0.4%
  • CVE-2024-7425 Medium 6.8 WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update 0.4%
  • CVE-2024-7419 High 8.3 WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields 0.6%
  • CVE-2024-32431 Medium 4.4 WordPress Import Users from CSV plugin <= 1.2 - PHP Object Injection 0.4%