The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2019-15329
CVSS 3.0 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2019-15328
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2019-15327
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2019-15326
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
CVSS 3.0 · 7.5 High
EPSS 2.3%
KEV · Not listed
Vendors
Products
CVE-2019-14683
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
CVSS 3.1 · 5.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2018-20101
The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.
CVSS 3.0 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.