CVE-2018-16255

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate

published April 12, 2019

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00886 · 58.9th percentile
Published
2019-04-12T17:59Z
EPSS history
Timeline
  • 12 APR 17:59Z
    There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate
    cvelistv5