Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 1.0%
exploitation probability
1.0%top 41% of all CVEs
observed exploitation
nono source reports it
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Unknown · Import and export users and customers