CVE-2020-12074

The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV

High · published April 23, 2020

CVSS v3.0
8.8
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01727 · 77.4th percentile
Published
2020-04-23T02:00Z
EPSS history
Timeline
  • 23 APR 02:00Z
    The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV
    cvelistv5