Description

WordPress Plugin Import all XML, CSV & TXT into WordPress is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Import all XML, CSV & TXT into WordPress version 3.7.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.7.3 or latest

References

https://wordpress.org/plugins/wp-ultimate-csv-importer/changelog/

Related Vulnerabilities

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (3.9.2)

ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2539)

WordPress Plugin Improved Product Options for WooCommerce Security Bypass (5.2.0)

WordPress Plugin eShop Code Injection (6.3.11)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7572)

Severity

High

Tags

Missing Update