Codection: Security Vulnerabilities
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-22
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.002
Published
2019-08-22
The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-22
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
CVSS Score
5.7
EPSS Score
0.001
Published
2019-08-08
The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.
CVSS Score
6.1
EPSS Score
0.003
Published
2018-12-12
CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL.
CVSS Score
6.5
EPSS Score
0.001
Published
2017-05-10
Page 2