CVE-2025-1972

creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtza4cmc2e 2025-03-22 14:33:21+00:00| seen| https://t.me/cvedetector/20869 2025-03-24 22:23:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8563...

CVE-2025-1972 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the adminlogpage function in all versions up to, and including, 2.6.2. This makes it possible for authenticated attackers, with Administrator-level...

CVE-2025-1972 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the adminlogpage function in all versions up to, and including, 2.6.2. This makes it possible for authenticated attackers, with Administrator-level...