Import any XML or CSV File to WordPress

Cross Site Request Forgery (CSRF) vulnerability <= 3.7.3

Auth. Directory traversal vulnerability <= 3.6.8

Auth. Arbitrary File Upload vulnerability <= 3.6.8

Authenticated Malicious File Upload vulnerability <= 3.6.7

Authenticated Arbitrary Code Execution vulnerability <= 3.6.7