Access violation vulnerability in WP Import – Ultimate CSV XML Importer for WordPress 7.33

The WP Import plugin for WordPress is not secure and could allow unauthorized users to access sensitive information. This is because it lacks proper authorization checks on the showsetting() function. This vulnerability exists in all versions of the plugin up to version 7.33. As a result, attackers with at least Author-level access could potentially obtain valuable information, such as OpenAI API keys that were set up through the plugin’s admin interface.