CVE Browser

Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion

WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability

WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability

WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability

Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality

Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode

Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection

Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS.

The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF.

The clean-login plugin before 1.5.1 for WordPress has reflected XSS.

The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.

The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.

CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL.