CVE-2019-15327: Codection Import Users From Csv With Meta

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The import-users-from-csv-with-meta plugin before 1.14.1.3 for WordPress has XSS via imported data.

Affected products

• Codection Import Users From Csv With Meta: before 1.14.1.3 (fixed in 1.14.1.3)

Published 2019-08-22. Last modified 2026-06-17.