CVE-2022-3244
Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Oct 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
Unknown · Import all XML, CSV & TXT into WordPressWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →