Known Vulnerabilities for Import Users From CSV by WP All Import
Listed below are 10 of the newest known vulnerabilities associated with "Import Users From CSV" by "WP All Import".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58578 json | LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows au... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-56769 json | Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-52801 json | Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alternativ... | Not Provided | 2026-06-24 | 2026-06-25 |
| CVE-2026-49952 json | Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated r... | Not Provided | 2026-06-15 | 2026-06-16 |
| CVE-2026-48493 json | Snipe-IT is an IT asset/license management system. In versions prior to 8.6.0, a user with only users.edit can send a PATCH t... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-45412 json | MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, SSRF via work_flow_template Import. Authenticated users ... | Not Provided | 2026-05-26 | 2026-05-27 |
| CVE-2026-45058 json | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is pers... | Not Provided | 2026-05-28 | 2026-05-30 |
| CVE-2026-44562 json | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the POST /... | Not Provided | 2026-05-15 | 2026-05-15 |
| CVE-2026-43318 json | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_not... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-41936 json | Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature ... | Not Provided | 2026-05-06 | 2026-05-06 |