CVE-2015-9331

The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-08-20

Last modified

2024-08-06

Weaknesses

CWE-254

Affected products

• Wp All Import (Soflyy)

References

• https://wordpress.org/plugins/wp-all-import/#developers