IA
Product
Import and export users and customers
9
CVEs
0
On KEV
8.0
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add Import and export users and customers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3558 | 8.0 | Nov 7 | The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files Affected: before 1.20.5 |
| CVE-2020-22277 | 8.0 | Nov 4 | Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile Affected: through 1.15.5.11 |
| CVE-2024-38787 | 7.5 | Aug 13 | WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability Affected: through 1.26.8 |
| CVE-2023-6583 | 7.2 | Jan 11 | Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality Affected: through 1.24.2 |
| CVE-2026-54862 New | 6.5 | Oct 29 | WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability Affected: through 2.5.9 |
| CVE-2023-6624 | 5.4 | Jan 11 | Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Affected: through 1.24.3 |
| CVE-2024-22151 | 5.3 | Jun 8 | WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability Affected: through 1.24.6 |
| CVE-2022-1255 | 4.8 | May 2 | The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import… Affected: before 1.19.2.1 |
| CVE-2024-4734 | 4.4 | May 15 | Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 1.26.6.1 |
Showing 9