Medium · 4.4 CVE-2024-32431 EUVD-2024-30249GHSA-m6cw-2mrx-vm24

WordPress Import Users from CSV plugin <= 1.2 - PHP Object Injection

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP All Import Product: Import Users from CSV

Description

Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.

Affected products

Vendor	Product	Affected	Fixed
WP All Import	Import Users from CSV	≤ 1.2	—

References

https://patchstack.com/database/vulnerability/import-users-from-csv/wordpress-import-users-from-csv-plugin-1-2-php-object-injection?_s_id=cve vdb-entry