CVE-2018-16258

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator

• CWE-79

• https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.htmlThird Party Advisory
• https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharingPermissions Required, Third Party Advisory
• https://ansawaf.blogspot.com/2019/04/xss-in-import-any-xml-or-csv-file-for.htmlThird Party Advisory
• https://docs.google.com/document/d/1Lfk0YQMIhlMCOOvVRX8HkU6C50s9QSW7C-9gnNmzsHY/edit?usp=sharingPermissions Required, Third Party Advisory

Published

Apr 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16252FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType…
• CVE-2018-16253In sig_verify() in x509.c in axTLS version 2.1.3 and before,…
• CVE-2018-16254There is an XSS vulnerability in WP All Import plugin 3.4.9 …
• CVE-2018-16255There is an XSS vulnerability in WP All Import plugin 3.4.9 …
• CVE-2018-16256There is an XSS vulnerability in WP All Import plugin 3.4.9 …
• CVE-2018-16257There are multiple XSS vulnerabilities in WP All Import plug…
• CVE-2018-16259There is an XSS vulnerability in WP All Import plugin 3.4.9 …
• CVE-2018-1626IBM Security Privileged Identity Manager Virtual Appliance 2…3.1
• CVE-2018-16261In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and …
• CVE-2018-16262The pkgmgr system service in Tizen allows an unprivileged pr…8.8
• CVE-2018-16263The PulseAudio system service in Tizen allows an unprivilege…8.8
• CVE-2018-16264The BlueZ system service in Tizen allows an unprivileged pro…6.5