CVE Database /
CVE-2019-15326
CVE · Medium
CVE-2019-15326 — Import and export users and customers [import-users-from-csv-with-meta] < 1.14.2.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-14683, CVE-2019-15326
|
Import and export users and customers [import-users-from-csv-with-meta] < 1.14.2.2 |
Cross-Site Request Forgery (CSRF) |
Medium
5.7
|
< 1.14.2.2
|
1.14.2.2 |
2019-06-22 |
—
|
CVE-2019-14683, CVE-2019-15326
The Import users from CSV with meta plugin prior to version 1.14.2.2 contains a cross-site request forgery vulnerability in the attachment deletion functionality accessible through wp-admin/admin-ajax.php?action=acui_delete_attachment, which could allow attackers to perform unauthorized actions without proper permission verification.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings