Import users from CSV with meta <= 1.14.0.2 - XSS and CSRF

2019-03-1400:00:00

wpscan.com

0.001 Low

EPSS

Percentile

36.1%

The Import and export users and customers WordPress plugin was affected by a XSS and CSRF security vulnerability.

CPENameOperatorVersion
import-users-from-csv-with-metalt1.14.0.3

CPE	Name	Operator	Version
	import-users-from-csv-with-meta	lt	1.14.0.3

References

plugins.trac.wordpress.org/changeset?reponame=&new=2050450%40import-users-from-csv-with-meta&old=2050003%40import-users-from-csv-with-meta

0.001 Low

EPSS

Percentile

36.1%

Related for WPVDB-ID:4E906600-A9E8-4151-9CB6-FD3BC0841B27