CVE-2019-15326

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...

WordPress Import users from CSV with meta Plugin < 1.14.2.1 Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113523";...

CVE-2019-15326

CVE-2019-15326 affects the WordPress plugin “import-users-from-csv-with-meta” prior to version 1.14.2.1. The vulnerability is a directory traversal flaw in the plugin’s handling of CSV imports, potentially allowing an attacker to access files outside the intended directory. The NVD entry lists CV...