Known Vulnerabilities for Import Users From CSV by WP All Import
Listed below are 10 of the newest known vulnerabilities associated with "Import Users From CSV" by "WP All Import".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115810 json | Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenti... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115395 json | Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extrac... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115394 json | Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to e... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-113648 json | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoi... | Not Provided | 2026-10-20 | 2026-10-23 |
| CVE-2026-112786 json | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112066 json | The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users w... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111956 json | The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly accessib... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-110812 json | Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenti... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-110761 json | ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test cr... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-110595 json | BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CS... | Not Provided | 2026-10-14 | 2026-10-26 |