CVE-2025-15673 | Import and export users and customers Plugin up to 2.4.2 on WordPress CSV Import path traversal

August 3, 2026 Yanac

A vulnerability marked as problematic has been reported in Import and export users and customers Plugin up to 2.4.2 on WordPress. The affected element is an unknown function of the component CSV Import. This manipulation causes path traversal.

This vulnerability is handled as CVE-2025-15673. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More