Skip to content
OpenAdvisories

Vendor

vaniivan

1 known vulnerabilities.

Products

Simple User Import Export 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2025-13133

    Simple User Import Export <= 1.1.7 - Authenticated (Admin+) CSV Injection

    The Simple User Import Export plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.1.7 via the 'Import/export users' function. This makes it possible for authenticated attackers, with Administrator-level access and above…

    vaniivan Simple User Import Export Web / CMS