CVE-2019-14683: CSRF
First published: Thu Aug 08 2019(Updated: )
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Codection Import Users From Csv With Meta | <1.14.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2112013
- https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers
- https://wpvulndb.com/vulnerabilities/9392
- https://www.pluginvulnerabilities.com/2019/06/21/cross-site-request-forgery-csrf-media-deletion-vulnerability-in-import-users-from-csv-with-meta/
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-14683.
What is the name of the plugin affected by this vulnerability?
The plugin affected by this vulnerability is Codection Import Users From Csv With Meta.
What is the severity of CVE-2019-14683?
The severity of CVE-2019-14683 is medium with a severity value of 5.7.
How can I fix the vulnerability in Codection Import Users From Csv With Meta?
To fix the vulnerability in Codection Import Users From Csv With Meta, update the plugin to version 1.14.2.2 or later.
Where can I find more information about CVE-2019-14683?
You can find more information about CVE-2019-14683 in the references provided: https://plugins.trac.wordpress.org/browser/import-users-from-csv-with-meta?rev=2112013, https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers, and https://wpvulndb.com/vulnerabilities/9392.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/codection
- canonical/codection import users from csv with meta