CVE Database /
CVE-2022-2711
CVE · High
CVE-2022-2711 — WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets [wp-all-import] < 3.6.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-2711
|
WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets [wp-all-import] < 3.6.9 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
High
7.2
|
< 3.6.9
|
3.6.9 |
2022-10-17 |
—
|
CVE-2022-2711
A directory traversal flaw in WP All Import versions before 3.6.9 could enable attackers to access and view arbitrary files within directories on the affected server or confirm the existence of specific files and folders. This capability could potentially be leveraged to discover and exploit other vulnerabilities in the system. The issue has been resolved in version 3.6.9 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings