← WordPress Vulnerabilities
WordPress security by component

Easy CSV Importer BETA

Easy CSV Importer BETA imports data from CSV files into WordPress websites.

Easy CSV Importer BETA (easy-csv-importer) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 14, 2024; the highest published CVSS base score is 10.

Plugin slug: easy-csv-importer

CVE-2024-52372: Easy CSV Importer BETA: Dangerous file upload

Easy CSV Importer BETA is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedNov 14, 2024
Safe version guidanceSee mitigation notes
Published vulnerabilities for easy-csv-importer
Safe version
Nov 14, 2024 CVE-2024-52372
Easy CSV Importer BETA: Dangerous file upload
Easy CSV Importer BETA is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE10.0