Import Export Wordpress Users
Vendor:
First CVE: Aug 23, 2019 · Active for 6 years
10
Total CVEs
More Total CVEs than 88% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Import Export Wordpress Users over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 23, 2019
6 years ago
Most Recent CVE
Mar 22, 2025
489 days ago
CVE Severity & Scoring
Import Export Wordpress Users10 CVEs
40%
60%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local1 (10.0%)
Network9 (90.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (90.0%)
High1 (10.0%)
Unknown0 (0.0%)
User Interaction
None9 (90.0%)
Unknown0 (0.0%)
Required1 (10.0%)
Privileges Required
Low3 (30.0%)
High6 (60.0%)
None1 (10.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-15092HIGH The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name colum | Aug 23, 2019 | 7.3 | 37 | NO | YES |
CVE-2025-1970HIGH The Export and Import Users and Customers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.2 via the validate_file() func | Mar 22, 2025 | 7.6 | 23 | NO | NO |
CVE-2025-1971HIGH The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via deserialization of untrusted in | Mar 22, 2025 | 7.2 | 22 | NO | NO |
CVE-2020-12074HIGH The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV. | Apr 23, 2020 | 8.8 | 22 | NO | NO |
CVE-2023-6558HIGH The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'upload_import_file' function | Jan 11, 2024 | 7.2 | 21 | NO | NO |
CVE-2025-1972MEDIUM The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in | Mar 22, 2025 | 6.5 | 20 | NO | NO |
CVE-2023-3459HIGH The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hf_update_customer' func | Jul 18, 2023 | 7.2 | 20 | NO | NO |
CVE-2025-1973MEDIUM The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 via the download_file() function. This ma | Mar 22, 2025 | 4.9 | 18 | NO | NO |
CVE-2024-32835MEDIUM Deserialization of Untrusted Data vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.3. | Apr 24, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-30492MEDIUM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress U | Mar 29, 2024 | 4.3 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
10.0% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Import Export Wordpress Users
Top CWEs
Versions
No cataloged versions.