CVE-2020-12074

HIGH

8.8

CVSS Severity Score

EPSS Score0.0260%

EPSS Percentile34.71th

Published2020年4月23日

Last Modified2024年11月21日

Vulnerability Description

The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.

📦

Webtoffee

< 1.3.9

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.

The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_...

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could ...

The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL ...