Not rated
CVE-2022-1255 The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV…
Description
The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Import and export users and customers 1.19 | earliest → < 1.19.2.1 | 1.19.2.1 |
Other CVEs of Import and export users and customers
The 7 CVEs of Import and export users and customers →
CVE-2026-92541
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in…
7.2
High
CVE-2026-92540
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users…
7.2
High
CVE-2026-16542
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before…
4.1
Medium
CVE-2025-15673
The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads…
4.9
Medium