ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-15092

PoC ×2—
CVSS 3.0
7.3 high
EPSS
5%p92
Published
()
Modified
Description

The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.

Vendors
webtoffee
Products
import export wordpress users
Ecosystems
WordPress, E-commerce
Weakness
CWE-1236
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (5.1%)

In the news

No ingested article mentions this CVE yet.