Import CSV or XML Datafeed With Ease, abe2aee4880269259229c836bb46574d9acc8e3f

CVE, Research URL: abe2aee4880269259229c836bb46574d9acc8e3f
Home page URL: Security reports for Import CSV or XML Datafeed With Ease
Application: Import CSV or XML Datafeed With Ease
Published on: Jan 17, 2022
Research Description: WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel [wp-ultimate-csv-importer] < 6.4.2 Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization The Import all XML, CSV & TXT into WordPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the disable_main_mode function in versions up to, and including, 6.4.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete arbitrary site options.
Affected versions: max 6.4.2.
Status: vulnerable