CVE-2025-24689: Javier Carazo Import and export users and customers

Описание

Оригинално описание

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta allows Retrieve Embedded Sensitive Data.This issue affects Import and export users and customers: from n/a through <= 1.27.12.

Засегнати продукти

• Javier Carazo Import and export users and customers: до 1.27.12

Вид слабост

• CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

История

Други уязвимости в Javier Carazo Import and export users and customers

• 7.2CVE-2026-104757
• 7.5CVE-2026-94178
• 5.9CVE-2024-50413
• 7.5CVE-2024-38787
• 5.4CVE-2024-34815

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-24689
• https://nvd.nist.gov/vuln/detail/CVE-2025-24689
• https://patchstack.com/database/Wordpress/Plugin/import-users-from-csv-with-meta/vulnerability/wordpress-import-and-export-users-and-customers-plugin-1-27-12-sensitive-data-exposure-vulnerability?_s_id=cve