WP All Import

Authenticated (Admin+) Limited Unsafe File Upload vulnerability <= 3.9.3

Authenticated (Administrator+) PHP Object Injection via Import File vulnerability <= 3.7.9

CrossSite Request Forgery to Imported Content Deletion <= 3.7.9

Cross Site Request Forgery (CSRF) vulnerability <= 3.7.3

Auth. Directory traversal vulnerability <= 3.6.8