Vulnerabilities > Codection

DATE CVE VULNERABILITY TITLE RISK
2019-08-22 CVE-2019-15326 Path Traversal vulnerability in Codection Import Users From CSV With Meta
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
network
low complexity
codection CWE-22
5.0
2019-08-22 CVE-2015-9336 Cross-site Scripting vulnerability in Codection Clean Login
The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
network
codection CWE-79
4.3
2019-08-08 CVE-2019-14683 Cross-Site Request Forgery (CSRF) vulnerability in Codection Import Users From CSV With Meta
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
network
low complexity
codection CWE-352
5.7
2018-12-12 CVE-2018-20101 Cross-site Scripting vulnerability in Codection Import Users From CSV With Meta 1.12.1
The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.
network
codection CWE-79
4.3
2017-05-10 CVE-2017-8875 Cross-Site Request Forgery (CSRF) vulnerability in Codection Clean Login 1.7.12
CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL.
network
codection CWE-352
4.3