CVE-2022-3244

medium

Description

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce

References

https://wpscan.com/vulnerability/de4bc449-3dd4-4776-943f-ac59ae813132

Details

Source: Mitre, NVD

Published: 2022-10-17

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 3.6

Vector: CVSS2#AV:N/AC:H/Au:S/C:P/I:P/A:N

Severity: Low

CVSS v3

Base Score: 4.2

Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Severity: Medium

EPSS

EPSS: 0.00083

Detections

Analytics