Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Import and export users and customers Directory Traversal - CVE-2019-15326 - Vulnerability Database
WP Plugin Import Users From Csv With Meta

WordPress Plugin Import and export users and customers Directory Traversal - CVE-2019-15326

Medium
Reference: CVE-2019-15326
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-15326
Title: WordPress Plugin Import and export users and customers Directory Traversal
Overview:

WordPress Plugin Import and export users and customers is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Import and export users and customers version 1.14.2 is vulnerable prior versions may also be affected.