PT-2019-7290 · WordPress · Wp All Import

Published 2019-08-20 · Updated 2019-08-22 · CVE-2015-9331

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions wp-all-import plugin versions prior to 3.2.4

Description The issue concerns the lack of prevention for unauthenticated requests to adminInit. This allows unauthorized access, potentially leading to exploitation.

Recommendations For versions prior to 3.2.4, update to version 3.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the adminInit functionality until the update is applied.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2015-9331

Affected Products

Wp All Import

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-9331 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9331 · Note
• https://wordpress.org/plugins/wp-all-import/#developers · Note