WP Clinic
Log in Sign up

CVE · Medium

CVE-2025-24689 — Import and export users and customers [import-users-from-csv-with-meta] < 1.27.13

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-24689 Import and export users and customers [import-users-from-csv-with-meta] < 1.27.13 Insertion of Sensitive Information into Externally-Accessible File or Directory Medium 5.9 < 1.27.13 1.27.13 2025-01-27

CVE-2025-24689

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta allows Retrieve Embedded Sensitive Data.This issue affects Import and export users and customers: from n/a through <= 1.27.12.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.