Vulnerabilities > CVE-2024-13562 - Unspecified vulnerability in Importwp Import WP

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

importwp

NVD

Published: 2025-01-25

Updated: 2025-02-04

Summary

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/ directory which can contain information like imported or local user data and files.

Vulnerable Configurations

Part	Description	Count
Application	Importwp Importwp Import WP - Importwp Import WP 0.1 Importwp Import WP 0.1.1 Importwp Import WP 0.1.2 Importwp Import WP 0.1.3 Importwp Import WP 0.1.4 Importwp Import WP 0.1.5 Importwp Import WP 0.1.6 Importwp Import WP 0.1.7 Importwp Import WP 0.1.8 Importwp Import WP 0.1.9 Importwp Import WP 0.2 Importwp Import WP 0.3 Importwp Import WP 0.3.1 Importwp Import WP 0.4 Importwp Import WP 0.4.1 Importwp Import WP 0.5 Importwp Import WP 0.6 Importwp Import WP 0.7 Importwp Import WP 1.0 Importwp Import WP 1.0.1 Importwp Import WP 1.0.3 Importwp Import WP 1.0.4 Importwp Import WP 1.0.5 Importwp Import WP 1.1.0 Importwp Import WP 1.1.1 Importwp Import WP 1.1.2 Importwp Import WP 1.1.3 Importwp Import WP 1.1.4 Importwp Import WP 1.1.5 Importwp Import WP 1.1.6 Importwp Import WP 1.1.7 Importwp Import WP 1.1.8 Importwp Import WP 2.0.0 Importwp Import WP 2.0.22 Importwp Import WP 2.0.23 Importwp Import WP 2.1.0 Importwp Import WP 2.2.0 Importwp Import WP 2.2.1 Importwp Import WP 2.2.2 Importwp Import WP 2.2.3 Importwp Import WP 2.2.4 Importwp Import WP 2.2.5 Importwp Import WP 2.3.0 Importwp Import WP 2.4.0 Importwp Import WP 2.4.1 Importwp Import WP 2.4.2 Importwp Import WP 2.4.3 Importwp Import WP 2.4.4 Importwp Import WP 2.4.5 Importwp Import WP 2.4.6 Importwp Import WP 2.4.7 Importwp Import WP 2.4.8 Importwp Import WP 2.4.9 Importwp Import WP 2.4.10 Importwp Import WP 2.5.0 Importwp Import WP 2.5.1 Importwp Import WP 2.5.2 Importwp Import WP 2.5.3 Importwp Import WP 2.5.4 Importwp Import WP 2.5.5 Importwp Import WP 2.6.0 Importwp Import WP 2.6.1 Importwp Import WP 2.6.2 Importwp Import WP 2.6.3 Importwp Import WP 2.6.4 Importwp Import WP 2.6.5 Importwp Import WP 2.7.0 Importwp Import WP 2.7.1 Importwp Import WP 2.7.2 Importwp Import WP 2.7.3 Importwp Import WP 2.7.4 Importwp Import WP 2.7.5 Importwp Import WP 2.7.6 Importwp Import WP 2.7.7 Importwp Import WP 2.7.8 Importwp Import WP 2.7.9 Importwp Import WP 2.7.10 Importwp Import WP 2.7.11 Importwp Import WP 2.7.12 Importwp Import WP 2.7.13 Importwp Import WP 2.7.14 Importwp Import WP 2.8.0 Importwp Import WP 2.8.1 Importwp Import WP 2.8.2 Importwp Import WP 2.8.3 Importwp Import WP 2.9.0 Importwp Import WP 2.9.1 Importwp Import WP 2.10.0 Importwp Import WP 2.10.1 Importwp Import WP 2.11.0 Importwp Import WP 2.11.1 Importwp Import WP 2.11.2 Importwp Import WP 2.11.3 Importwp Import WP 2.11.4 Importwp Import WP 2.11.5 Importwp Import WP 2.11.6 Importwp Import WP 2.11.7 Importwp Import WP 2.11.8 Importwp Import WP 2.12.0 Importwp Import WP 2.13.0 Importwp Import WP 2.13.1 Importwp Import WP 2.13.2 Importwp Import WP 2.13.3 Importwp Import WP 2.13.4 Importwp Import WP 2.13.5	106

Summary

Vulnerable Configurations

References