CVE-2018-0546
Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Date published : 2018-03-09
https://plugins.trac.wordpress.org/changeset/1742744/