Codection: >> Import Users From Csv With Meta >> 1.10.6.6 Security Vulnerabilities
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-08-22
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-22
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-22
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.002
Published
2019-08-22
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
CVSS Score
5.7
EPSS Score
0.001
Published
2019-08-08