CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

RedhatCVE•added 2025/05/22 6:24 p.m.•3 views

CVE-2021-24451

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection...

7.2CVSS7AI score0.00974EPSS

Exploits2References1

CVE•added 2021/07/06 11:3 a.m.•47 views

CVE-2021-24451

The CVE-2021-24451 entry concerns the WordPress plugin Export Users With Meta (before 0.6.5). The vulnerability arises because the plugin did not escape the list of roles when constructing the SQL in the export function, which is accessible to admins, enabling authenticated SQL injection. Affecte...

7.2CVSS6.9AI score0.00974EPSS

Exploits2References1Affected Software1

Cvelist•added 2021/07/06 11:3 a.m.•15 views

CVE-2021-24451 Export Users With Meta < 0.6.5 - Authenticated SQL Injection

7.3AI score0.00974EPSS

Exploits2References1

NVD•added 2019/08/22 8:15 p.m.•9 views

CVE-2019-15328

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

6.1CVSS6.4AI score0.0019EPSS

Exploits0References2

Prion•added 2019/08/22 8:15 p.m.•11 views

Cross site request forgery (csrf)

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF...

6.8CVSS8.7AI score0.00202EPSS

Exploits0References2Affected Software1

Prion•added 2019/08/22 8:15 p.m.•16 views

Cross site scripting

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS...

4.3CVSS6.4AI score0.0019EPSS

Exploits0References2Affected Software1

CVE•added 2019/08/22 7:10 p.m.•45 views

CVE-2019-15327

The CVE-2019-15327 vulnerability affects the WordPress plugin import-users-from-csv-with-meta (pre-1.14.1.3). The issue is an XSS via data imported into the plugin. Public documents indicate a fix in version 1.14.1.3 (VendorFix). The vulnerability is documented across multiple sources (NVD, Red H...

6.1CVSS6AI score0.0019EPSS

Exploits0References1Affected Software1

CNVD•added 2019/08/22 12:0 a.m.•1 views

WordPress import-users-from-csv-with-meta plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site request forgery vulnerability exists in WordPres...

8.8CVSS6.7AI score0.00202EPSS

Exploits0References1