← CVE Intelligence

CVE-2022-3244

Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation PUBLISHED

Description (CNA)

The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated users to access some of the plugin features if they manage to get the related nonce

Affected (CNA)

Vendor / productVersions
Unknown / Import all XML, CSV & TXT into WordPressaffected 6.5.8 before 6.5.8

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.