WordPress WP All Import Plugin <= 3.6.7 is vulnerable to Arbitrary Code Execution

Low priority Mitigate with Patchstack

<= 3.6.7Vulnerable version(s)

3.6.8Fixed version

28 Jun, 2022

Get the fastest vulnerability mitigation with Patchstack!

CVSS 9.1

This could allow a malicious actor to remotely execute malicious code on your site.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

This security issue has a low severity impact and is unlikely to be exploited.

Patchstack has issued a mitigation rule to block any attacks until you have updated to a fixed version.

Update to version 3.6.8 or later to resolve the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Have additional information or questions about this entry? Let us know.

Go to

Reported by Profile Image

NaN undefined, NaN