VYPR

Members Import

by WordPress

CVEs (1)

  • CVE-2022-4663MedJan 3, 2023
    risk 0.36cvss 5.5epss 0.01

    The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to…