Threats tagged 'ghsa-42cf-ph32-46f5'

The Import and export users and customers plugin for WordPress contains a privilege escalation vulnerability in all versions up to and including 2.4.17. This flaw arises from inconsistent CSV escaping between the export and import functions, allowing an authenticated user with Subscriber-level access or higher to escalate their privileges to Administrator. Exploitation requires a site administrator to perform an export and re-import operation with specific options enabled.