Medium severity6.1NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2018-0547

Description

Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp All Importllm-fuzzy
Range: <3.4.7
Package: https://wordpress.org/plugins/wp-all-import
Soflyy/WP All Importv5
Range: prior to version 3.4.7

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN60032768/index.htmlnvdThird Party AdvisoryVDB Entry
plugins.trac.wordpress.org/changeset/1827741/nvdThird Party Advisory
wordpress.org/plugins/wp-all-import/nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000