Vulnerabilities > Soflyy > WP ALL Import > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-08-20 CVE-2018-20978 Cross-site Scripting vulnerability in Soflyy WP ALL Import
The wp-all-import plugin before 3.4.7 for WordPress has XSS.
network
soflyy CWE-79
4.3
2019-08-20 CVE-2017-18567 Cross-site Scripting vulnerability in Soflyy WP ALL Import
The wp-all-import plugin before 3.4.6 for WordPress has XSS.
network
soflyy CWE-79
4.3
2019-08-20 CVE-2015-9331 7PK - Security Features vulnerability in Soflyy WP ALL Import
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
network
low complexity
soflyy CWE-254
5.0
2019-08-20 CVE-2015-9329 Cross-site Scripting vulnerability in Soflyy WP ALL Import
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
network
soflyy CWE-79
4.3
2019-04-12 CVE-2018-16259 Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit.
network
low complexity
soflyy CWE-79
6.1
2019-04-12 CVE-2018-16258 Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type.
network
low complexity
soflyy CWE-79
6.1
2019-04-12 CVE-2018-16257 Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9
There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template.
network
low complexity
soflyy CWE-79
6.1
2019-04-12 CVE-2018-16256 Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule).
network
low complexity
soflyy CWE-79
6.1
2019-04-12 CVE-2018-16255 Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate.
network
low complexity
soflyy CWE-79
6.1
2019-04-12 CVE-2018-16254 Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9
There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options.
network
low complexity
soflyy CWE-79
6.1