Vulnerabilities > Webtoffee > Import Export Wordpress Users > 1.3.9

DATE CVE VULNERABILITY TITLE RISK
2024-01-11 CVE-2023-6558 Unrestricted Upload of File with Dangerous Type vulnerability in Webtoffee Import Export Wordpress Users
The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'upload_import_file' function in versions up to, and including, 2.4.8.
network
low complexity
webtoffee CWE-434
7.2