Import and export users and customers
Javier Carazo
Developer
2.3.7
Latest version
70,000
Installations
No date
Last updated
Vulnerability history
0 present
19 patched
5 Mitigation rules
- Authenticated (Subscriber+) Privilege Escalation vulnerability<= 2.0.805/05/2026
- Privilege Escalation to Administrator via save_extra_user_profile_fields vulnerability<= 1.29.724/03/2026
- Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability<= 1.26.6.102/02/2026
- Sensitive Data Exposure vulnerability<= 1.27.1227/01/2025
- Cross Site Scripting (XSS) vulnerability<= 1.27.524/10/2024
- Sensitive Information via Imported File vulnerability<= 1.26.807/08/2024
- Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability<= 1.26.6.114/05/2024
- Broken Access Control vulnerability<= 1.26.509/05/2024
- PHP Object Injection vulnerability<= 1.26.222/04/2024
- Broken Access Control vulnerability<= 1.24.616/01/2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode vulnerability<= 1.24.311/12/2023
- Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality vulnerability<= 1.24.211/12/2023
- Stored Cross-Site Scripting (XSS) vulnerability<= 1.19.211/04/2022
- CSV Injection vulnerability<= 1.16.3.520/11/2020
- Unauthorised Authenticated Users Export vulnerability1.1506/01/2020
- Cross-Site Request Forgery (CSRF) vulnerability<= 1.14.1.326/06/2019
- Cross-Site Scripting (XSS) vulnerability<= 1.1213/12/2018
- Authenticated Media Deletion Vulnerability<= 1.9.4.602/09/2016
- Cross-Site Request Forgery (CSRF)<= 1.9.4.602/09/2016