CVE-2018-16257

There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template

published April 12, 2019

CVSS
—
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00864 · 58.2th percentile
Published
2019-04-12T18:02Z
EPSS history
Timeline
  • 12 APR 18:02Z
    There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template
    cvelistv5