Lucene search
+L

195 matches found

Cvelist
Cvelist
•added 2024/08/13 10:33 a.m.•76 views

CVE-2024-38787 WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.8...

7.5CVSS0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/13 12:00 a.m.•7 views

CVE-2024-38787: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.8...

7.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/08/07 9:59 a.m.•21 views

WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability

Sensitive Information via Imported File vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Import and export users and customers versions = 1.26.8...

7.5CVSS7AI score0.0042EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2024/06/11 4:18 p.m.•62 views

CVE-2024-34815 WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.5...

5.4CVSS0.00366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•10 views

CVE-2024-34815: Missing Authorization

Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.5...

5.4CVSS5.8AI score0.00366EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/11 12:00 a.m.•23 views

WordPress plugin Import and export users and customers security vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Import...

5.4CVSS5.8AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/11 12:00 a.m.•8 views

PT-2024-26211

Name of the Vulnerable Software and Affected Versions Codection Import and export users and customers versions 1.26.5 and earlier Description The issue is related to a Missing Authorization vulnerability. This vulnerability affects the import and export functionality for users and customers...

5.4CVSS5.8AI score0.00366EPSS
SaveExploits0References3
NVD
NVD
•added 2024/06/08 5:15 p.m.•64 views

CVE-2024-22151

Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.24.6...

5.3CVSS0.00317EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/08 5:15 p.m.•27 views

CVE-2024-22151

Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.24.6...

5.3CVSS8.4AI score0.00317EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•7 views

PT-2024-32554

Name of the Vulnerable Software and Affected Versions Import and export users and customers plugin for WordPress versions up to, and including, 1.26.6.1 Description The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping...

4.4CVSS6AI score0.00286EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•9 views

CVE-2024-4656: Improper Neutralization of Input During Web Page Generation

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user agent header in all versions up to, and including, 1.26.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS6AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•6 views

CVE-2024-4734: Improper Neutralization of Input During Web Page Generation

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.26.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS5.8AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•23 views

PT-2024-32042 · WordPress · Import/Export Users/Customers Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: Import and export users and customers plugin for WordPress versions up to, and including, 1.26.6.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with administrator...

4.4CVSS6.8AI score0.00255EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2024/05/09 2:42 p.m.•16 views

WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Import and export users and customers versions = 1.26.5...

5.4CVSS5.8AI score0.00366EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2024/05/04 12:00 a.m.•22 views

WordPress plugin: Security vulnerabilities in user and customer import/export functionality

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Import...

4.3CVSS5.8AI score0.00431EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/04 12:00 a.m.•8 views

CVE-2024-1050: Missing Authorization

The Import and export users and customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxforceresetpassworddeletemetas function in all versions up to, and including, 1.26.5. This makes it possible for authenticated attackers,...

4.3CVSS5.7AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/24 7:27 a.m.•45 views

CVE-2024-32817 WordPress Import and export users and customers plugin <= 1.26.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.2...

4.4CVSS5.1AI score0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/24 7:27 a.m.•22 views

CVE-2024-32817 WordPress Import and export users and customers plugin <= 1.26.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.26.2...

4.4CVSS5.8AI score0.0037EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•10 views

CVE-2024-32817: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.2...

4.4CVSS5.8AI score0.0037EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/22 7:21 p.m.•19 views

WordPress Export and Import Users and Customers plugin <= 2.5.3 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Trình Vũ / Sonicrrrr from VNPT-VCI Patchstack Alliance in WordPress Plugin Import Export WordPress Users versions = 2.5.3...

5.4CVSS5.8AI score0.00361EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder