Threats tagged 'ghsa-9339-975x-grvq'

The Export and Import Users and Customers plugin for WordPress contains a privilege escalation vulnerability in all versions up to and including 2.7.5. This flaw arises from a mismatch in CSV escape characters between the export and import functions, allowing an attacker with Subscriber-level access to create an arbitrary Administrator account by injecting crafted CSV data during the export-import workflow.