CVE-2025-15673

The Import and export users and customers WordPress plugin, in versions prior to 2.4.3 , contains a vulnerability that fails to restrict file paths during a CSV import process. This lack of path validation allows high-privileged users to perform an arbitrary file read , potentially accessing sens...