EUVD-2024-51673

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

WordPress Import WP plugin exposes sensitive data in uploads directory to unauthenticated attackers.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-13562	25 Jan 202511:27	–	circl
CNNVD	WordPress plugin Import WP – Export and Import CSV and XML files to WordPress 信息泄露漏洞	25 Jan 202500:00	–	cnnvd
CVE	CVE-2024-13562	25 Jan 202511:22	–	cve
Cvelist	CVE-2024-13562 Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory	25 Jan 202511:22	–	cvelist
NVD	CVE-2024-13562	25 Jan 202512:15	–	nvd
Patchstack	WordPress Import WP plugin <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability	27 Jan 202522:39	–	patchstack
Positive Technologies	PT-2025-2219 · WordPress · Import Wp	25 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-13562	4 Feb 202523:54	–	redhatcve
Vulnrichment	CVE-2024-13562 Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory	25 Jan 202511:22	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 20, 2025 to January 26, 2025)	30 Jan 202516:04	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "10825d04-53d8-3491-835d-a89a09d5ee74",
        "vendor": {
          "name": "jcollings"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ba9ff1cc-792f-39a5-afc3-fb6f1365259c",
        "product": {
          "name": "Import WP – Export and Import CSV and XML files to WordPress"
        },
        "product_version": "* ≤2.14.5"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d6d69ffd-bb39-4fcc-9444-27d1a901e7c9
plugins	www.plugins.trac.wordpress.org/changeset/3226495/

03 Oct 2025 20:07Current

8.9High risk

Vulners AI Score8.9

CVSS 3.17.5

EPSS0.00592

SSVC