WordPress Plugin Vulnerabilities | Page 15 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

import-users-from-csv

Published

2024-04-12

Title

Import Users from CSV < 1.3 - Authenticated (Admin+) PHP Object Injection

Slug

import-users-from-csv-with-meta

Published

2018-12-11

Title

Import users from CSV with meta <= 1.12 - Import Cross-Site Scripting (XSS)

Slug

import-users-from-csv-with-meta

Published

2019-03-14

Title

Import users from CSV with meta <= 1.14.0.2 - XSS and CSRF

Slug

import-users-from-csv-with-meta

Published

2019-06-20

Title

Import users from CSV with meta <= 1.14.1.2 - XSS

Slug

import-users-from-csv-with-meta

Published

2019-06-22

Title

Import users from CSV with meta < 1.14.2.2 - CSRF leading to attachment deletion & Path Traversal

Slug

import-users-from-csv-with-meta

Published

2020-01-01

Title

Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export

Slug

import-users-from-csv-with-meta

Published

2020-11-20

Title

Import and export users and customers < 1.16.3.6 - CSV Injection

Slug

import-users-from-csv-with-meta

Published

2022-04-11

Title

Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2022-10-17

Title

Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

Slug

import-users-from-csv-with-meta

Published

2023-12-11

Title

Import and export users and customers < 1.24.4 - Contributor+ Stored XSS

Slug

import-users-from-csv-with-meta

Published

2023-12-08

Title

Import and export users and customers < 1.24.3 - Admin+ Arbitrary File Read/Deletion

Slug

import-users-from-csv-with-meta

Published

2024-01-16

Title

Import and export users and customers < 1.24.7 - Missing Authorization via fire_cron REST endpoint

Slug

import-users-from-csv-with-meta

Published

2024-04-22

Title

Import and export users and customers < 1.26.3 - Authenticated (Admin+) PHP Object Injection

Slug

import-users-from-csv-with-meta

Published

2024-05-03

Title

Import and export users and customers < 1.26.6 - Missing Authorization

Slug

import-users-from-csv-with-meta

Published

2024-05-14

Title

Import and export users and customers < 1.26.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2024-05-14

Title

Import and export users and customers < 1.26.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2024-08-07

Title

Import and export users and customers < 1.26.9 - Unauthenticated Information Exposure

Slug

import-users-from-csv-with-meta

Published

2024-10-24

Title

Import and export users and customers < 1.27.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

import-users-from-csv-with-meta

Published

2025-01-27

Title

Import and export users and customers < 1.27.13 - Unauthenticated Sensitive Information Disclosure

Slug

import-users-from-csv-with-meta

Published

2026-03-21

Title

Import and export users and customers < 2.0 - Privilege Escalation to Administrator via save_extra_user_profile_fields

Slug

import-users-from-csv-with-meta

Published

2026-05-01

Title

Import and export users and customers < 2.0.9 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields

Slug

import-users-from-csv-with-meta

Published

2026-07-09

Title

Import and export users and customers < 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action

Slug

import-users-from-csv-with-meta

Published

2026-07-23

Title

Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import

Slug

import-users-from-csv-with-meta

Published

2026-07-24

Title

Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read

Slug

import-users-to-mailchimp

Published

2025-01-16

Title

Import Users to MailChimp <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting