WordPress Plugin Vulnerabilities

Import Export WordPress Users < 1.3.2 - CSV Injection

Description

The Import Export WordPress Users WordPress plugin was affected by a CSV Injection security vulnerability.

Affects Plugins

Plugin icon
users-customers-import-export-for-wp-woocommerce
Fixed in 1.3.2

References

CVE
CVE-2019-15092
Exploitdb
47303
URL
https://hackpuntes.com/cve-2019-15092-wordpress-plugin-import-export-users-1-3-0-csv-injection/

Miscellaneous

Original Researcher
Javier Olmedo
Verified
No
WPVDB ID
5778828e-61de-4870-a38f-00a01711a851

Timeline

Publicly Published
2019-08-22 (about 6 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
IndiaNIC FAQs Manager 1.0 - CAPTCHA Value Disclosure
Published
2023-09-09
Title
ProfilePress < 4.13.2 - Limited Privilege Escalation via 'acceptable_defined_roles'
Published
2019-10-25
Title
Email Templates < 1.3.1 - HTML Injection
Published
2014-08-01
Title
Wordpress <= 2.8.3 - Remote Admin Password Reset
Published
2024-03-28
Title
Pods < 3.1 - Contributor+ Remote Code Execution