Plugin icon

Export and Import Users and Customers

users-customers-import-export-for-wp-woocommerce

Vulnerabilities:

10

Last Updated:

May 7, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Fixed in
Fixed in 2.6.3
CVSS
4.9 (medium)
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Fixed in
Fixed in 2.6.3
CVSS
2.7 (low)
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Fixed in
Fixed in 2.6.3
CVSS
7.2 (high)
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Fixed in
Fixed in 2.6.3
CVSS
7.6 (high)
Published
2024-04-22
Title
Export and Import Users and Customers < 2.5.4 - Authenticated (Admin+) PHP Object Injection
Fixed in
Fixed in 2.5.4
CVSS
7.2 (high)
Published
2024-03-28
Title
Import Export WordPress Users < 2.5.3 - Authenticated (Shop Manager+) Path Traversal
Fixed in
Fixed in 2.5.3
CVSS
2.7 (low)
Published
2023-12-12
Title
Export and Import Users and Customers < 2.4.9 - Shop Manager+ Arbitrary File Upload
Fixed in
Fixed in 2.4.9
CVSS
7.2 (high)
Published
2023-07-14
Title
Export and Import Users and Customers < 2.4.2 - Shop Manager+ Privilege Escalation
Fixed in
Fixed in 2.4.2
CVSS
7.2 (high)
Published
2020-03-11
Title
Import Export WordPress Users < 1.3.9 - Authenticated Arbitrary User Creation
Fixed in
Fixed in 1.3.9
CVSS
8.8 (high)
Published
2019-08-22
Title
Import Export WordPress Users < 1.3.2 - CSV Injection
Fixed in
Fixed in 1.3.2
CVSS
7.3 (high)