Export and Import Users and Customers

Vulnerabilities 10Slug users-customers-import-export-for-wp-woocommerceLatest version 2.7.3WordPress.org →

Minimum safe version

2.6.3

Update to 2.6.3 or later to address 10 fixable vulnerabilities

Latest available2.7.3 ✓
High 7.6
2025-03-22< 2.6.3

Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function

EUVDWordfenceCVE
High 7.2
2025-03-22< 2.6.3

Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter

EUVDWordfenceCVE
Medium 4.9
2025-03-24< 2.6.3

WordPress Import Export WordPress Users Plugin <= 2.6.2 is vulnerable to Arbitrary File Download

PatchstackEUVDWordfenceCVE
Low 2.7
2025-03-22< 2.6.3

Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

EUVDWordfenceCVE
High 7.2
2024-12-13< 2.4.9

WordPress Import Export WordPress Users Plugin <= 2.4.8 is vulnerable to Arbitrary File Upload

PatchstackCVEWordfenceWPScan
High 7.3
2019-08-26< 1.3.2

WordPress Import Export WordPress Users plugin <= 1.3.1 - CSV Injection vulnerability

PatchstackCVEWordfence