7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.7%
Description The plugin does not properly validate upload files via the import_action() function, allowing users having access to the plugin (by default admin) to upload arbitrary files
www.wordfence.com/threat-intel/vulnerabilities/id/03faec37-2cce-4e14-92f2-d941ab1b4ce9