There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-04-12T18:05:35

Updated: 2024-08-05T10:17:38.454Z

Reserved: 2018-08-31T00:00:00

Link: CVE-2018-16259

cve-icon Vulnrichment

Updated: 2024-08-05T10:17:38.454Z

cve-icon NVD

Status : Modified

Published: 2019-04-12T19:29:00.533

Modified: 2024-08-05T11:15:26.907

Link: CVE-2018-16259

cve-icon Redhat

No data.