The wp-all-import plugin prior to 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
soflyy wp all import