Import WP – CSV & XML Import Export for WordPress
Import WP – CSV & XML Import Export for WordPress has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 2 of the records (33%). Other recurring categories include External Control Of File Name Or Path, Files Or Directories Accessible To External Parties.
Every one of the 6 issues recorded for Import WP – CSV & XML Import Export for WordPress has a vendor fix available, so running the current release closes all known holes.
6 independent researchers contributed these findings, one record each. Import WP – CSV & XML Import Export for WordPress is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-13562Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Read the full analysisVulnerability Records

Import WP – CSV & XML Import Export for WordPress
Author
jcollings
Import WP makes it straightforward to import and export WordPress data from CSV and XML files — no fixed file layout required. Map any column or XML node to WordPress fields with a visual selector, then run the import. Bring files in from a local upload, remote URL, data feed, FTP server, or Google Sheets. Export back out to CSV, XML, or JSON when you need a clean data dump or a migration bundle. This is a fantastic plugin. It allows an incredible amount of flexibility but the best part about it is the support, each question I had was answered near instantly and any problems were addressed and fixed immediately. I am impressed. I highly recommend the pro version, it is a relatively small cost for a really helpful tool. — WordPress.org review by nzstefan How to import CSV or XML into WordPress Choose your file — Upload a CSV/XML file, or fetch it from a remote URL, FTP, or Google Sheets. Map your data — Use the visual selector to connect file fields to WordPress posts, pages, categories, tags, users, or attachments. Set permissions — Choose how records are matched, and whether the importer can insert, update, or delete. Run the importer — Review the log and history when the run finishes. Import from URL, FTP, data feeds and Google Sheets Import WP is built for recurring and remote data sources, not only one-off uploads: Import CSV and XML from a remote URL or data feed Import from an FTP server Import from Google Sheets (via a published / downloadable sheet URL) Import from files already on your web server Skip unchanged records to speed up repeat imports Export WordPress data to CSV, XML or JSON The built-in WordPress exporter lets you export the fields you need: Export posts, pages, taxonomies and related data Export custom fields, images, attachments and terms Export to CSV, XML or JSON Customise CSV headings and XML node / attribute names Create nested XML for repeating data Filter which records are included in the export Import WordPress attachments and media Import images and other attachments from CSV or XML: Remote URL FTP server Local filesystem WordPress media library (reuse existing files to avoid duplicates) Attachment title, caption, alt text and description Free version features Visual CSV and XML field mapping Import posts, pages, categories, tags, users and attachments Import from upload, URL, FTP, server path or Google Sheets Export to CSV, XML or JSON Unique identifiers for insert / update matching Insert, update and delete controls per import Import history and logging Free add-ons Extend Import WP with free integrations: WooCommerce — import and export products, variations, images, attributes, categories, prices and stock Yoast SEO and Rank Math SEO — import SEO metadata Polylang and WPML — import translations BLM file importer — property / BLM feeds See all Import WP add-ons. WooCommerce product import and export With the free WooCommerce add-on you can: Import and export simple, grouped, external, variable and variation products Import and export product images (featured and gallery) Import and export categories (including hierarchy), attributes and tags Import and export prices and stock levels Export products to CSV, XML or JSON Import WP Pro Import WP Pro adds premium support plus: Import to custom fields Import to custom post types Import to custom taxonomies Schedule importers Advanced Custom Fields (ACF) add-on — import and export ACF fields (requires Pro) JetEngine add-on — import and export JetEngine data (requires Pro) A flexible, well-supported alternative when you need CSV/XML import and export without enterprise pricing.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C