plugin

Wp Users Exporter Vulnerabilities

1 known security issue reported for the Wp Users Exporter WordPress plugin. Most recent disclosed Aug 29, 2022.

1 medium

Running Wp Users Exporter on your site? Check whether your installed version is affected.

WP Users Exporter <= 1.4.2 - CSV Injection

medium

The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that will embed into the expo...

CVSS:: 6.5
Affected:: up to 1.4.2
Fix:: No patched version reported
Disclosed:: Aug 29, 2022

CVE-2022-3026 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database