plugin

Users To Csv Vulnerabilities

1 known security issue reported for the Users To Csv WordPress plugin. Most recent disclosed Jun 15, 2015.

1 medium

Running Users To Csv on your site? Check whether your installed version is affected.

Users To CSV <= 1.4.5 - Cross-Site Request Forgery

medium

The Users To CSV plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.5. This is due to missing or incorrect nonce validation on multiple functions. This makes it possible for unauthenticated attackers to export user information via a forged request granted they can tri...

CVSS:: 4.3
Affected:: up to 1.4.5
Fix:: No patched version reported
Disclosed:: Jun 15, 2015

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database