Skip to content
Sign in
7.2 High

CVE-2022-3243 The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before…

Description

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Import all XML, CSV & TXT into WordPress 6.5 earliest → < 6.5.8 6.5.8

Other CVEs of Import all XML, CSV & TXT into WordPress

The 2 CVEs of Import all XML, CSV & TXT into WordPress →
CVE-2022-3244 The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could… 4.2 Medium
Track this CVE