A vulnerability, which was classified as problematic, was found in WP All Import Pro Plugin up to 4.0.0 on WordPress. Affected is an unknown function. The manipulation of the argument filepath results in cross site scripting.
This vulnerability is known as CVE-2026-2830. It is possible to launch the attack remotely. No exploit is available.
