WordPress Plugin Import Export WordPress Users Security Bypass (1.3.8)
Description
WordPress Plugin Import Export WordPress Users is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently import new users via a CSV file, including administrative-level users. WordPress Plugin Import Export WordPress Users version 1.3.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.9 or latest