CVE Database /
CVE-2019-14683
CVE · Medium
CVE-2019-14683 — Import and export users and customers [import-users-from-csv-with-meta] < 1.14.2.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-14683, CVE-2019-15326
|
Import and export users and customers [import-users-from-csv-with-meta] < 1.14.2.2 |
Cross-Site Request Forgery (CSRF) |
Medium
5.7
|
< 1.14.2.2
|
1.14.2.2 |
2019-06-22 |
—
|
CVE-2019-14683, CVE-2019-15326
The Import users from CSV with meta plugin for WordPress before version 1.14.2.2 contains a cross-site request forgery vulnerability in the attachment deletion functionality accessed through the admin-ajax.php endpoint with the acui_delete_attachment action parameter, allowing attackers to perform unauthorized actions on behalf of authenticated administrators.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings