7562 matches found
Cross site request forgery (csrf)
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...
Cross site scripting
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...
CVE-2019-15326
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...
CVE-2019-15327
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...
CVE-2019-15327
The CVE-2019-15327 vulnerability affects the WordPress plugin import-users-from-csv-with-meta (pre-1.14.1.3). The issue is an XSS via data imported into the plugin. Public documents indicate a fix in version 1.14.1.3 (VendorFix). The vulnerability is documented across multiple sources (NVD, Red H...
CVE-2019-15328
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...
CVE-2019-15329
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...
CVE-2019-15328: Improper Neutralization of Input During Web Page Generation
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...
CVE-2019-15329: Cross-Site Request Forgery (CSRF)
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...
PT-2019-14057
Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a Cross-Site Scripting XSS problem. Recommendations For versions prior to 1.14.0.3, update to version 1.14.0.3 or later to resolve the...
CVE-2019-15327: Improper Neutralization of Input During Web Page Generation
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...
PT-2019-14058
Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a CSRF problem in the import-users-from-csv-with-meta plugin for WordPress. Recommendations For versions prior to 1.14.0.3, update the...
WordPress add-from-server plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. add-from-server is a file upload plugin used in it. A cross-site request forgery vulnerability exists in the WordPress add-from-server...
PT-2019-14056
Name of the Vulnerable Software and Affected Versions import-users-from-csv-with-meta plugin versions prior to 1.14.1.3 Description The issue concerns a problem where imported data can lead to XSS. Recommendations For versions prior to 1.14.1.3, update to version 1.14.1.3 or later to resolve the...
PT-2019-14055
Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.2.1 Description The issue allows for directory traversal. Recommendations For versions prior to 1.14.2.1, update to version 1.14.2.1 or later to resolve the issue...
CVE-2019-15326: Improper Limitation of a Pathname to a Restricted Directory
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...
CVE-2016-10914
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file...
Cross site request forgery (csrf)
The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file...
CVE-2016-10914
The CVE-2016-10914 issue affects the WordPress add-from-server plugin prior to version 3.3.2, where CSRF allows importing a large file. Several sources (Red Hat, CNVD, CVE listings, WPVulnDB) consistently describe this as a CSRF vulnerability in the add-from-server plugin, with potential impact i...