Codection Import And Export Users And Customers — known CVE vulnerabilities

Every CVE whose affected-product data names Codection Import And Export Users And Customers, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-22277 — CVSS 8.0 (high): Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.
• CVE-2022-3558 — CVSS 8.0 (high): The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
• CVE-2023-6583 — CVSS 6.6 (medium): The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including…
• CVE-2024-22151 — CVSS 5.3 (medium): Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and…
• CVE-2023-6624 — CVSS 4.9 (medium): The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s)…
• CVE-2022-1255 — CVSS 4.8 (medium): The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could…