Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
WP All Import
WP All Import
Developer
4.0.0
Latest version
100,000
Installations
7 days ago
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Vulnerability history
0 present
15 fixed
1 Mitigation rules
Authenticated (Administrator+) Remote Code Execution via Conditional Logic vulnerability
<= 3.9.6
6 days ago
Authenticated (Admin+) Limited Unsafe File Upload vulnerability
<= 3.9.3
Sep 9, 2025
Authenticated (Administrator+) PHP Object Injection via Import File vulnerability
<= 3.7.9
Feb 3, 2025
Cross-Site Request Forgery to Imported Content Deletion
<= 3.7.9
Feb 3, 2025
Cross Site Request Forgery (CSRF) vulnerability
<= 3.7.3
Apr 10, 2024
Auth. Directory traversal vulnerability
<= 3.6.8
Oct 17, 2022
Auth. Arbitrary File Upload vulnerability
<= 3.6.8
Oct 14, 2022
Authenticated Malicious File Upload vulnerability
<= 3.6.7
Jul 1, 2022
Authenticated Arbitrary Code Execution vulnerability
<= 3.6.7
Jun 28, 2022
Stored Cross-Site Scripting (XSS) vulnerability
<= 3.6.2
Nov 2, 2021
Cross-Site Scripting (XSS) vulnerability
<= 3.4.6
Mar 13, 2018
Cross-Site Scripting (XSS) vulnerability
<= 3.4.5
Mar 12, 2018
Cross-Site Scripting (XSS) vulnerability
<= 3.4.5
Oct 17, 2017
Multiple Vulnerabilities
<= 3.2.4
Mar 17, 2015
Remote Code Execution
<= 3.2.3
Feb 26, 2015