WordPress Plugin Vulnerabilities

Import Export WordPress Users < 1.3.9 - Authenticated Arbitrary User Creation

Description

"The flaw allowed anybody with subscriber-level access or above to import new users via a CSV file, including administrative-level users" providing subscriber-level users and above with the ability to escalate their privileges.

Proof of Concept

Affects Plugins

Plugin icon
users-customers-import-export-for-wp-woocommerce
Fixed in 1.3.9

References

CVE
CVE-2020-12074
URL
https://www.wordfence.com/blog/2020/03/vulnerability-patched-in-import-export-wordpress-users/
URL
https://plugins.trac.wordpress.org/changeset/2252948/users-customers-import-export-for-wp-woocommerce

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
8.8 (high)

Miscellaneous

Original Researcher
Chloe Chamberland
Submitter
Chloe Chamberland
Submitter website
https://www.wordfence.com/
Submitter twitter
infosecchloe
Verified
No
WPVDB ID
b7c5e0f3-3d29-49ce-b93e-fcae6b6e62a6

Timeline

Publicly Published
2020-03-11 (about 6 years ago)
Added
2020-03-11 (about 6 years ago)
Last Updated
2020-04-24 (about 6 years ago)

Other

Published
Title
Published
2023-08-03
Title
WP Ultimate CSV Importer < 7.9.9 - Author+ Privilege Escalation
Published
2025-12-01
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.3 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Published
2026-06-16
Title
Registration Form for WooCommerce < 1.1.0 - Unauthenticated Privilege Escalation
Published
2025-05-19
Title
Motors < 5.6.68 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
Published
2025-10-21
Title
King Addons for Elementor < 51.1.37 - Unauthenticated Privilege Escalation