Is WP Smart Import safe?

Every recorded flaw

• May 23, 2025WP Smart Import: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2025-47453 · affects up to 1.1.3 · reported by PatchstackHigh 8.1
• Jan 4, 2025WP Smart Import : Import any XML File to: Reflected Cross-Site ScriptingCVE-2024-12701 · affects up to 1.1.2 · reported by WordfenceMedium 6.1
• Apr 18, 2024WordPress Importer: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-32597 · affects up to 1.0.7 · reported by PatchstackMedium 5.9
• Mar 27, 2024WordPress Importer: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-30201 · affects up to 1.0.4 · reported by PatchstackHigh 7.1
• Dec 6, 2022Unauth.CVE-2022-40209 · affects up to 1.0.2 · reported by PatchstackMedium 6.1
• Jul 7, 2021Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.CVE-2020-24147 · affects 1.0.0 to 1.0.0 · reported by MITRE1.6% oddsCritical 9.1

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.