CVE-2021-24451: Export Users With Meta Project Export Users With Meta

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.

Affected products

• Export Users With Meta Project Export Users With Meta: before 0.6.5 (fixed in 0.6.5)

Published 2021-07-06. Last modified 2026-06-17.