CVE-2025-1970

概要

参考情報

• plugins.trac.wordpress.org/browser/users-customers-import-export-for-wp-woocommerce/trunk/admin/modules/import/classes/class-import-ajax.php · Product
• plugins.trac.wordpress.org/changeset/3259688 · Patch
• wordpress.org/plugins/users-customers-import-export-for-wp-woocommerce · Product
• wordfence.com/threat-intel/vulnerabilities/id/5a4d7d40-8e0e-4251-8e25-3fd4ebd3a93e · Third Party Advisory

import export wordpress users のその他の脆弱性

• CVE-2025-1973中 4.9The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 v…
• CVE-2025-1972中 6.5The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valida…
• CVE-2025-1971高 7.2The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2…
• CVE-2023-6558高 7.2The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validat…
• CVE-2023-3459高 7.2The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit…