CVE-2024-22151

概要

参考情報

• patchstack.com/database/vulnerability/import-users-from-csv-with-meta/wordpress-import-and-export-users-and-customers-plugin-1-24-6-broken-access-control-vulnerability · Third Party Advisory

import and export users and customers のその他の脆弱性

• CVE-2023-6624中 5.4The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in…
• CVE-2023-6583高 7.2The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.…
• CVE-2022-3558高 8.0The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
• CVE-2022-1255中 4.8The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allo…
• CVE-2020-22277高 8.0Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.