The Import any XML or CSV File to WordPress plugin is vulnerable to a security issue. This affects versions up to 3.6.8. Attackers with administrator-level permissions can exploit this vulnerability to upload malicious files to your website. If they are successful