Description
WordPress Plugin WP Smart Import: Import any XML File to WordPress is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks; other attacks are also possible. WordPress Plugin WP Smart Import: Import any XML File to WordPress version 1.0.0 is vulnerable.
Remediation
Update to plugin version 1.0.1 or latest
References
Related Vulnerabilities
WordPress Plugin Podlove Podcast Publisher SQL Injection (2.5.3)
WordPress Plugin WebLibrarian SQL Injection (3.5.4)
Sqlite Numeric Truncation Error Vulnerability (CVE-2025-6965)
WordPress Plugin JTRT Responsive Tables SQL Injection (4.1)
Oracle Application Server CVE-2007-5519 Vulnerability (CVE-2007-5519)