CVE-2018-16259

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit

published April 12, 2019

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00886 · 58.6th percentile
Published
2019-04-12T18:05Z
EPSS history
Timeline
  • 12 APR 18:05Z
    There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit
    cvelistv5