CVE-2020-22277 - Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile

HIGH

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile

Published Nov 4, 2020

8.0

HIGH

CVSS 3.1

EPSS 1.85%

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.

No remediation recorded yet.

Weaknesses (1)

CWE-1236

Link	Providers	Tags
https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22277.pdf		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-15042		Advisory
https://mega.nz/file/bSQnlS4R#UY_ozLkvXgXFKzqtTRKeB9RXGi6aEQF3X6eKXdSiBt0		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/import-users-from-csv-with-meta/#:~:text=Install%20Import%20and%20export%20users%20and%20customers%20automatically%2Cis%20uploaded%20and%20extracted%2C%20click%20Activate%20Plugin%20.		x_refsource_MISC

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 4, 2020

Updated Aug 4, 2024

Reserved Aug 13, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 4, 2020

Updated Aug 4, 2024

GitHub

No data