{"id":"CVE-2024-38787","aliases":["EUVD-2024-37625","GHSA-j4xj-8c96-39jq"],"status":"published","title":"WordPress Import and export users and customers plugin \u003c= 1.26.8 - Sensitive Information via Imported File vulnerability","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through \u003c= 1.26.8.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0042,"percentile":0.36812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-201"],"published":"2024-08-13T10:33:21Z","modified":"2026-06-17T07:41:03Z","products":[{"vendor":"carazo","product":"import and export users and customers"},{"vendor":"codection","product":"import_and_export_users_and_customers"},{"vendor":"javier carazo","product":"import and export users and customers"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/import-users-from-csv-with-meta/vulnerability/wordpress-import-and-export-users-and-customers-plugin-1-26-8-sensitive-information-via-imported-file-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38787"},{"url":"https://patchstack.com/database/vulnerability/import-users-from-csv-with-meta/wordpress-import-and-export-users-and-customers-plugin-1-26-8-sensitive-information-via-imported-file-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-j4xj-8c96-39jq"}],"sources":{"cve":[{"id":"CVE-2024-38787","title":"WordPress Import and export users and customers plugin \u003c= 1.26.8 - Sensitive Information via Imported File vulnerability","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through \u003c= 1.26.8.","status":"published","published":"2024-08-13T10:33:21.336Z","modified":"2026-04-28T16:10:07.13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-37625","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through \u003c= 1.26.8.","status":"published","published":"2024-08-13T10:33:21Z","modified":"2026-04-28T16:10:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:06:01.355111Z"}],"ghsa":[{"id":"GHSA-j4xj-8c96-39jq","title":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Codection Import and...","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Codection Import and export users and customers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Import and export users and customers: from n/a through 1.26.8.","status":"published","published":"2024-08-13T12:30:52Z","modified":"2026-04-01T18:31:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200","CWE-201"],"updated_at":"2026-11-02T15:06:57.545024Z"}],"nvd":[{"id":"CVE-2024-38787","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through \u003c= 1.26.8.","status":"published","published":"2024-08-13T11:15:17.08Z","modified":"2026-06-17T07:41:03.553Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:10:18.563492Z"}]}}