wpallimport
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets | 4 | – | Mar 6, 2026 |
Exploited and recent CVEs
- CVE-2026-2830 WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath' 0.3%
- CVE-2025-12733 Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic 0.7%
- CVE-2025-10001 Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload 0.6%
- CVE-2022-1565 Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload 15.2%