CVE-2018-16254

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options

published April 12, 2019

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00905 · 59.4th percentile
Published
2019-04-12T17:57Z
EPSS history
Timeline
  • 12 APR 17:57Z
    There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options
    cvelistv5