WordPress plugin

Advanced Import security & vulnerabilities

Q: Is any Advanced Import vulnerability listed in CISA KEV?

No. None of the known Advanced Import vulnerabilities is currently listed in the CISA KEV catalog.

advanced-import— active installsLast vulnerability Jun 18, 2026

No known unpatched vulnerabilities in the latest version

All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

2Known vulnerabilities

Critical0
High1
Medium1
Low0

Vulnerabilities per year

All Advanced Import vulnerabilities

Advanced Import vulnerabilities
Severity	Vulnerability	CVE	Published
High8.8	Cross-Site Request Forgery ≤1.3.7Update to 1.3.8	CVE-2022-3677	Nov 14, 2022

High8.8
Cross-Site Request Forgery
≤1.3.7Update to 1.3.8
CVE-2022-3677Nov 14, 2022

Advanced Import: common questions

Does Advanced Import have known vulnerabilities?

Yes. VulnCrest Radar lists 2 known vulnerabilities in Advanced Import: 1 high, 1 medium. None are known to affect version null.

How do I check which version of Advanced Import I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Advanced Import vulnerability?

CVE-2026-4328, published Jun 18, 2026: Advanced Import: One-Click Demo Import for WordPress <= 1.4.6 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameter. Severity: Medium (CVSS 6.4).

Is any Advanced Import vulnerability listed in CISA KEV?

No. None of the known Advanced Import vulnerabilities is currently listed in the CISA KEV catalog.