What’s Vulnerable › Products
jcollings Import WP – Export and Import CSV and XML files to WordPress vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Latest jcollings Import WP – Export and Import CSV and XML files to WordPress vulnerabilities
- CVE-2026-14925 — Import WP < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download (CVSS 7.5)
- CVE-2025-12894 — Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure (CVSS 5.3)
- CVE-2025-12137 — Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read (CVSS 4.9)
- CVE-2024-13562 — Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory (CVSS 7.5)
- CVE-2023-7253 — Import WP < 2.13.1 - Admin+ Server-side Request Forgery (CVSS 6.1)
- CVE-2022-1273 — Import WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE (CVSS 7.2)