Medium · 5.3 CVE-2024-22151 EUVD-2024-19747GHSA-px63-vx4p-5hj8

WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability

Published Jun 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Codection Product: Import and export users and customers

Description

Missing Authorization vulnerability in Codection Import and export users and customers.This issue affects Import and export users and customers: from n/a through 1.24.6.

Affected products

Vendor	Product	Affected	Fixed
Codection	Import and export users and customers	≤ 1.24.6	—

References

https://patchstack.com/database/vulnerability/import-users-from-csv-with-meta/wordpress-import-and-export-users-and-customers-plugin-1-24-6-broken-access-control-vulnerability?_s_id=cve vdb-entry