CVE-2019-15326: Codection Import Users From Csv With Meta

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.

Affected products

• Codection Import Users From Csv With Meta: before 1.14.2.1 (fixed in 1.14.2.1)

Published 2019-08-22. Last modified 2026-06-17.