CVE-2022-36386

Description

Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

Affected Platforms

Weakness Type

CWE-434, CWE-94, CWE-434

References

• https://patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any…
• https://wordpress.org/plugins/wp-all-import/#developers
• https://patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any…
• https://wordpress.org/plugins/wp-all-import/#developers