Security
فارسی
All products

import-users-from-csv-with-meta

WordPress · Plugin
35 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings SaveCVE-2026-120554 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-54862 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile FieldsCVE-2026-17001 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.5.5 - Authenticated (Editor+) Privilege EscalationCVE-2026-104757 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.5.2 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-94178 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile FieldsCVE-2026-86583 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers <= 2.5.1 - Authenticated (Admin+) Privilege EscalationCVE-2026-92541 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers <= 2.5.1 - Authenticated (Admin+) Privilege EscalationCVE-2026-92540 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers <= 2.4.4 - Authenticated (Administrator+) Server-Side Request ForgeryCVE-2026-16542 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.4.1 - Authenticated (Admin+) Privilege EscalationCVE-2026-16534 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers < 2.4.3 - Authenticated (Admin+) Arbitrary File ReadCVE-2025-15673 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX ActionCVE-2026-15026 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta FieldsCVE-2026-7641 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers <= 1.26.5 - Missing AuthorizationCVE-2024-34815 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fieldsCVE-2026-3629 import-users-from-csv-with-meta WordPress High Fix reported
Import and export users and customers <= 1.27.12 - Unauthenticated Sensitive Information DisclosureCVE-2025-24689 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 1.27.5 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-50413 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 1.26.8 - Unauthenticated Information ExposureCVE-2024-38787 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import FunctionalityCVE-2023-6583 import-users-from-csv-with-meta WordPress Medium Fix reported
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodeCVE-2023-6624 import-users-from-csv-with-meta WordPress Medium Fix reported