Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbSanjay DasWPVDB-ID:DE4BC449-3DD4-4776-943F-AC59AE813132
HistorySep 20, 2022 - 12:00 a.m.

Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation

2022-09-2000:00:00
Sanjay Das
wpscan.com
6
wordpress
security
plugin
authorization
nonce

EPSS

0.001

Percentile

23.0%

JSON

The plugin does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce

Related

patchstack 1
cvelist 1
prion 1
cve 1
nvd 1
patchstack
patchstack
WordPress Import all XML, CSV & TXT plugin <= 6.5.7 - Missing Authorization vulnerability
2022-09-20 00:00:00
cvelist
cvelist
CVE-2022-3244 Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation
2022-10-17 00:00:00
prion
prion
Design/Logic Flaw
2022-10-17 12:15:00
cve
cve
CVE-2022-3244
2022-10-17 12:15:10
nvd
nvd
CVE-2022-3244
2022-10-17 12:15:10

EPSS

0.001

Percentile

23.0%

JSON
Related for WPVDB-ID:DE4BC449-3DD4-4776-943F-AC59AE813132
patchstack1cvelist1prion1cve1nvd1