Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2019-15329

Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.
0
0
Attacker Value
Unknown

CVE-2019-15328

Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.
0
0
Attacker Value
Unknown

CVE-2019-15326

Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
0
0
Attacker Value
Unknown

CVE-2019-15327

Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.
0
0
Attacker Value
Unknown

CVE-2019-14683

Disclosure Date: August 08, 2019 (last updated November 27, 2024)
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
Attack Vector: NetworkPrivileges: LowUser Interaction: Required
0
0
Attacker Value
Unknown

CVE-2018-20101

Disclosure Date: December 12, 2018 (last updated November 27, 2024)
The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.
0
0