Description
WordPress Plugin Import all XML, CSV & TXT into WordPress is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information (usernames, hashed passwords and email addresses) that may help in launching further attacks. WordPress Plugin Import all XML, CSV & TXT into WordPress version 3.6.74 is vulnerable; prior versions are also affected.
Remediation
Update to plugin version 3.6.75 or latest
References
Related Vulnerabilities
MySQL CVE-2015-2643 Vulnerability (CVE-2015-2643)
WordPress Plugin Custom Field Template PHP Object Injection (2.5.7)
WordPress Plugin Modern Events Calendar Lite Multiple Vulnerabilities (5.16.5)
phpMyAdmin CVE-2019-6799 Vulnerability (CVE-2019-6799)
WordPress Plugin Simple Security Multiple Cross-Site Scripting Vulnerabilities (1.1.5)