Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-24689 EUVD-2025-3883GHSA-c3f5-rvxj-625x

WordPress Import and export users and customers plugin 1.27.12 - Sensitive Data Exposure vulnerability

Published Jan 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta allows Retrieve Embedded Sensitive Data.This issue affects Import and export users and customers: from n/a through <= 1.27.12.

Affected products

VendorProductAffectedFixed
Javier Carazo Import and export users and customers ≤ 1.27.12 —

References