← All advisories

Medium severity6.1NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-20101

CVE-2018-20101

Description

The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Codection/Import Users From CSV With Meta
cpe:2.3:a:codection:import_users_from_csv_with_meta:1.12.1:*:*:*:*:wordpress:*:*
WordPress/Import Users From CSV With Metallm-fuzzy
Range: <1.12.1
Package: https://wordpress.org/plugins/import-users-from-csv-with-meta

Patches

Vulnerability mechanics

References

2

wordpress.org/plugins/import-users-from-csv-with-meta/nvdProductRelease Notes
wpvulndb.com/vulnerabilities/9176nvd

News mentions

0

No linked articles in our index yet.