First published: Thu Aug 22 2019(Updated: )
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Codection Import Users From Csv With Meta | <1.14.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-15326 is a vulnerability in the import-users-from-csv-with-meta plugin for WordPress that allows directory traversal.
The severity of CVE-2019-15326 is high, with a severity value of 7.5.
CVE-2019-15326 affects the import-users-from-csv-with-meta plugin before version 1.14.2.1 for WordPress.
To fix CVE-2019-15326, upgrade the import-users-from-csv-with-meta plugin to version 1.14.2.1 or later.
You can find more information about CVE-2019-15326 at the following references: [1](https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers), [2](https://wpvulndb.com/vulnerabilities/9392).