CVE-2019-15328

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

Design/Logic Flaw

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...

Cross site request forgery (csrf)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

Cross site scripting

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

CVE-2019-15326

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...

CVE-2019-15327

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...

CVE-2019-15327

The CVE-2019-15327 vulnerability affects the WordPress plugin import-users-from-csv-with-meta (pre-1.14.1.3). The issue is an XSS via data imported into the plugin. Public documents indicate a fix in version 1.14.1.3 (VendorFix). The vulnerability is documented across multiple sources (NVD, Red H...

CVE-2019-15328

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

CVE-2019-15328

The CVE-2019-15328 entry concerns the WordPress plugin import-users-from-csv-with-meta, vulnerable prior to version 1.14.0.3. The issue is a cross-site scripting (XSS) flaw in the plugin, allowing an attacker to execute client-side code. Documented impact indicates the vulnerability affects the p...

CVE-2019-15329

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

WordPress import-users-from-csv-with-meta plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site request forgery vulnerability exists in WordPres...

CVE-2019-15328: Improper Neutralization of Input During Web Page Generation

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

CVE-2019-15329: Cross-Site Request Forgery (CSRF)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

Import Export WordPress Users < 1.3.2 - CSV Injection

The Import Export WordPress Users WordPress plugin was affected by a CSV Injection security vulnerability...

PT-2019-14057

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a Cross-Site Scripting XSS problem. Recommendations For versions prior to 1.14.0.3, update to version 1.14.0.3 or later to resolve the...

CVE-2019-15327: Improper Neutralization of Input During Web Page Generation

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data...

PT-2019-14058

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a CSRF problem in the import-users-from-csv-with-meta plugin for WordPress. Recommendations For versions prior to 1.14.0.3, update the...

PT-2019-13982

Name of the Vulnerable Software and Affected Versions webtoffee WordPress Users & WooCommerce Customers Import Export plugin version 1.3.0 Description The issue allows CSV injection in the user url, display name, first name, and last name columns in an exported CSV file created by the WF...

PT-2019-14056

Name of the Vulnerable Software and Affected Versions import-users-from-csv-with-meta plugin versions prior to 1.14.1.3 Description The issue concerns a problem where imported data can lead to XSS. Recommendations For versions prior to 1.14.1.3, update to version 1.14.1.3 or later to resolve the...

PT-2019-14055

Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.2.1 Description The issue allows for directory traversal. Recommendations For versions prior to 1.14.2.1, update to version 1.14.2.1 or later to resolve the issue...