Import CSV or XML Datafeed With Ease, 06a98f51-e581-4e42-8287-7c18254d100c

CVE, Research URL: 06a98f51-e581-4e42-8287-7c18254d100c
Home page URL: Security reports for Import CSV or XML Datafeed With Ease
Application: Import CSV or XML Datafeed With Ease
Published on: -
Research Description: WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export [wp-ultimate-csv-importer] < 6.4.2 WP Ultimate CSV Importer < 6.4.2 - Subscriber+ Arbitrary Option Deletion The plugin does not have authorisation and CSRF checks when deleting options via the disable_main_mode AJAX action, and does not ensure that the option to be delete belong to the plugin. As a result, any authenticated user, such as subscriber, could delete arbitrary options from the blog
Affected versions: max 6.4.2.
Status: vulnerable