Advisories · Technology
Import and export users and customers.
Every CVE that names Import and export users and customers among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer
- Import and export users and customers
- Privilege escalation
- CVSS 7.2 High
Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_users
- Import and export users and customers
- Privilege escalation
- CVSS 4.1 Medium
Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar
- Import and export users and customers
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read
- Import and export users and customers
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import
- Import and export users and customers
- Privilege escalation
- CVSS 8.0 High
Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection
- Import and export users and customers
- Other injection
-
Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting
- Import and export users and customers
- Cross-site scripting (XSS)