CVE-2024-8252 | High | 8.8 | 2024-08-30 | The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the cle… |
CVE-2024-22151 | Medium | 5.3 | 2024-06-08 | Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and customers: from n/a throu… |
CVE-2023-6624 | Medium | 4.9 | 2024-01-11 | The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to… |
CVE-2023-6583 | Medium | 6.6 | 2024-01-11 | The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.24.2 via the Recurr… |
CVE-2022-4838 | Medium | 5.4 | 2023-02-06 | The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which cou… |
CVE-2022-3558 | High | 8.0 | 2022-11-07 | The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files. |
CVE-2022-1255 | Medium | 4.8 | 2022-05-02 | The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege us… |
CVE-2020-22277 | High | 8.0 | 2020-11-04 | Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile. |
CVE-2019-15329 | High | 8.8 | 2019-08-22 | The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF. |
CVE-2019-15328 | Medium | 6.1 | 2019-08-22 | The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has XSS. |
CVE-2019-15327 | Medium | 6.1 | 2019-08-22 | The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data. |
CVE-2019-15326 | High | 7.5 | 2019-08-22 | The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal. |
CVE-2015-9336 | Medium | 6.1 | 2019-08-22 | The clean-login plugin before 1.5.1 for WordPress has reflected XSS. |
CVE-2019-14683 | Medium | 5.7 | 2019-08-08 | The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF. |
CVE-2018-20101 | Medium | 6.1 | 2018-12-12 | The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell. |
CVE-2017-8875 | Medium | 6.5 | 2017-05-10 | CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL. |