CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.5.
Explanation of Vulnerability in Simple Terms
The Import and export users and customers plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to modify or delete data they should not have access to. An attacker with a basic user account can alter user records or remove customer information without proper permission checks. Update to a version newer than 1.26.5 to resolve this issue.
What an attacker can do
Modify or delete user and customer records without proper authorization.
Potential impact on your site
User and customer data can be altered or deleted by unauthorized accounts, risking data integrity and customer trust.
Conditions required to exploit
Attacker must have a low-privilege user account on the site (e.g., subscriber or customer role).
Key dates
External resources
Related vulnerabilities
