Lucene search
+L

46 matches found

Kitploit
Kitploit
•added 2026/10/09 5:37 a.m.•18 views

import-users-from-csv-with-meta

import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export...

6AI score
SaveExploits0
PyPA
PyPA
•added 2026/07/07 2:34 p.m.•32 views

GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

7.1CVSS7AI score0.00312EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2020-17605

Malware in sbrugna...

8.9CVSS7.9AI score0.00935EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2019-5834

Malware in sbrugna...

5.7CVSS6.2AI score0.00679EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-30249

Malicious code in bioql PyPI...

7.2CVSS6.4AI score0.00384EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 8:37 a.m.•19 views

CVE-2024-32431

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2...

7.2CVSS5.2AI score0.00384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:09 a.m.•22 views

CVE-2019-15326

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal...

7.5CVSS7.1AI score0.0232EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/03/20 10:51 a.m.•15 views

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview gluoncv is a Gluon CV Toolkit Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the fromcsv function in ImageClassificationDataset. An attacker can overwrite files on the victim's system by using this function to extract maliciou...

7.1CVSS7.9AI score0.00312EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/09 7:47 a.m.•36 views

CVE-2024-13906

The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.7.3 via deserialization of untrusted input in the 'importgalleryfromcsv' function. This makes it possible for...

7.2CVSS7.1AI score0.00711EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•6 views

PT-2025-10047

Name of the Vulnerable Software and Affected Versions The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress versions up to, and including, 4.7.3 Description The issue allows authenticated attackers with Administrator-level access and above to inject a PHP Object via...

7.2CVSS0.00711EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/27 12:00 a.m.•7 views

CVE-2025-24689: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta allows Retrieve Embedded Sensitive Data.This issue affects Import and export users and customers: from n/a through =...

5.9CVSS5.8AI score0.00317EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•5 views

CVE-2024-50413: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta allows Stored XSS.This issue affects Import and export users and customers: from n/a through = 1.27.5...

5.9CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/13 12:00 a.m.•6 views

CVE-2024-38787: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.8...

7.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•8 views

CVE-2024-34815: Missing Authorization

Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.5...

5.4CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•4 views

CVE-2024-32817: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through = 1.26.2...

4.4CVSS5.8AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/15 7:16 a.m.•47 views

CVE-2024-32431 WordPress Import Users from CSV plugin <= 1.2 - PHP Object Injection

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2...

4.4CVSS5.1AI score0.00384EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/15 7:16 a.m.•21 views

CVE-2024-32431 WordPress Import Users from CSV plugin <= 1.2 - PHP Object Injection

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2...

4.4CVSS5.2AI score0.00384EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•8 views

CVE-2024-32431: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2...

7.2CVSS5.8AI score0.00384EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•22 views

PT-2024-24561 · Unknown · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import Import Users from CSV versions 1.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which affects the Import Users from CSV functionality. Recommendations: For versions 1.2 and earlier, update ...

7.2CVSS6.5AI score0.00384EPSS
SaveExploits0References4
NVD
NVD
•added 2020/08/29 8:15 p.m.•32 views

CVE-2020-24897

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

8.9CVSS8.3AI score0.00935EPSS
SaveExploits0References1
Rows per page
Query Builder