WP All Import Pro

CrossSite Request Forgery to Imported Content Deletion vulnerability < 4.9.8

Authenticated (Administrator+) PHP Object Injection via Import File vulnerability < 4.9.8

Authenticated (Administrator+) Stored CrossSite Scripting via SVG File Upload vulnerability <= 4.9.7

Authenticated (Administrator+) ServerSide Request Forgery via File Import vulnerability <= 4.9.3