TI-2025-12005 CVE-2025-13133 · GHSA-fmjc-6x9q-54mf
Simple User Import Export <= 1.1.7 - Authenticated (Admin+) CSV Injection
Priority LOW 29
The Simple User Import Export plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.1.7 via the 'Import/export users' function.