CVE-2018-20101: Codection Import Users From Csv With Meta

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.

Affected products

• Codection Import Users From Csv With Meta: version 1.12.1 only

Published 2018-12-12. Last modified 2026-06-17.