CVE-2022-3243: high-severity vulnerability in Import all XML, CSV & TXT into WordPress
Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 1.3%
The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL statements, leading to SQL injection exploitable by high privilege users such as admin
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · Import all XML, CSV & TXT into WordPressRelated CVEs — Import all XML, CSV & TXT into WordPress
In the same product, most dangerous first.