The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Comments Import Export Woocommerce Plugin | — | Update comments-import-export-woocommerce plugin to version 2.1.11, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
| Order Import Export For Woocommerce Plugin | — | Update order-import-export-for-woocommerce plugin to version 1.6.1, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
| Order Xml File Export Import For Woocommerce Plugin | — | Update order-xml-file-export-import-for-woocommerce plugin to version 1.3.1, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
| Product Import Export For Woo Plugin | — | Update product-import-export-for-woo plugin to version 1.7.5, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
| Product Reviews Import Export For Woocommerce Plugin | — | Update product-reviews-import-export-for-woocommerce plugin to version 1.3.3, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
| Users Customers Import Export For Wp Woocommerce Plugin | — | Update users-customers-import-export-for-wp-woocommerce plugin to version 1.3.9, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
| Xml File Export Import For Stampscom And Woocommerce Plugin | — | Update xml-file-export-import-for-stampscom-and-woocommerce plugin to version 1.1.9, or a newer patched version | May 15, 2025 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub