WebToffee Import Export WordPress Users Schwachstellen (CVE)

Für WebToffee Import Export WordPress Users veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6 Ergebnisse

4.9Mittel

CVE-2025-1973 vor 1 Jahr

Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function

webtoffee Export and Import Users and Customers

The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access an…

7.6Hoch

CVE-2025-1970 vor 1 Jahr

Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function

webtoffee Export and Import Users and Customers

The Export and Import Users and Customers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.2 via the validate_file() function. This makes it possible for authenticated attackers, with Administrator-le…

2.7Niedrig

CVE-2025-1972 vor 1 Jahr

Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

webtoffee Export and Import Users and Customers

The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.6.2. This makes it possible for authentic…

7.2Hoch

CVE-2025-1971 vor 1 Jahr

Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter

webtoffee Export and Import Users and Customers

The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via deserialization of untrusted input from the 'form_data' parameter. This makes it possible for authenticated at…

5.4Mittel

CVE-2024-32835 vor 2 Jahren

WordPress Export and Import Users and Customers plugin <= 2.5.3 - Deserialization of untrusted data vulnerability

WebToffee Import Export WordPress Users; wordpress import_export_wordpress_users

Deserialization of Untrusted Data vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.3.

4.3Mittel

CVE-2024-30492 vor 2 Jahren

WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability

WebToffee Import Export WordPress Users; webtoffee import_export_wordpress_users

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.2.