CVE Database /
CVE-2019-15328
CVE · Medium
CVE-2019-15328 — Import and export users and customers [import-users-from-csv-with-meta] < 1.14.0.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-15328
|
Import and export users and customers [import-users-from-csv-with-meta] < 1.14.0.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 1.14.0.3
|
1.14.0.3 |
2019-03-14 |
—
|
CVE-2019-15328
The Import and export users and customers plugin for WordPress versions before 1.14.0.3 contained both cross-site scripting and cross-site request forgery vulnerabilities. These flaws could allow attackers to execute malicious scripts in users' browsers or perform unauthorized actions on behalf of authenticated users. The vulnerabilities affected the plugin's user and customer import functionality.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings