Skip to content
Sign in
6.1 Medium

CVE-2023-7253 The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting…

Description

The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations.

Affected products and versions

Product Affected versions Fixed in
Import WP 2.13 earliest → < 2.13.1 2.13.1
import_wp 2.13 earliest → < 2.13.1 2.13.1

Other CVEs of Import WP

The 2 CVEs of Import WP →
CVE-2026-14925 The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file… 7.5 High
Track this CVE