What’s Vulnerable › Vulnerabilities

CVE-2018-20101

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-12 · updated 2026-06-17
• Weakness: CWE-79

Description

The codection "Import users from CSV with meta" plugin before 1.12.1 for WordPress allows XSS via the value of a cell.

Affected products

• Codection Import Users From Csv With Meta: 1.12.1

References

• https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers
• https://wpvulndb.com/vulnerabilities/9176
• https://wordpress.org/plugins/import-users-from-csv-with-meta/#developers
• https://wpvulndb.com/vulnerabilities/9176

Get alerted when CVE-2018-20101 or the next vulnerability affects your stack