46 matches found
CVE-2019-15328: Improper Neutralization of Input During Web Page Generation
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...
PT-2019-14058
Name of the Vulnerable Software and Affected Versions WordPress import-users-from-csv-with-meta plugin versions prior to 1.14.0.3 Description The issue concerns a CSRF problem in the import-users-from-csv-with-meta plugin for WordPress. Recommendations For versions prior to 1.14.0.3, update the...
CVE-2019-14683
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acuideleteattachment CSRF...
CVE-2019-14683: Cross-Site Request Forgery (CSRF)
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acuideleteattachment CSRF...
PT-2018-15259
Name of the Vulnerable Software and Affected Versions WordPress "Import users from CSV with meta" plugin versions prior to 1.12.1 Description The issue allows for XSS via the value of a cell in the "Import users from CSV with meta" plugin. Recommendations For versions prior to 1.12.1, update the...
CVE-2018-20101: Improper Neutralization of Input During Web Page Generation
The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell...