Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-06-20
CVE-2023-7082 - Import Any Xml Or Csv File To Plugin
The Import any XML or CSV File to WordPress plugin before 3.7.3 accepts all zip files and automatically extracts the zip file into a publicly accessible directory without sufficiently validating the extracted file type. This may allows high privilege users such as administrator to upload an executable file type leading to remote code execution.
PLUGIN
Import Any Xml Or Csv File To
CVE-2023-7082
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-2268 - Import Any Xml Or Csv File To Plugin
The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE
PLUGIN
Import Any Xml Or Csv File To
CVE-2022-2268
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24714 - Import Any Xml Or Csv File To Plugin
The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin pages, which could allow high privilege users to perform Cross-Site attacks even when the unfiltered_html capability is disallowed.
PLUGIN
Import Any Xml Or Csv File To
CVE-2021-24714
Risk Score