CVE Alert: CVE-2025-24689

Vulnerability Summary: CVE-2025-24689

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in codection Import and export users and customers allows Retrieve Embedded Sensitive Data. This issue affects Import and export users and customers: from n/a through 1.27.12.

Affected Endpoints:

No affected endpoints listed.

Published Date:

1/27/2025, 3:15:16 PM

⚠️ CVSS Score:

Exploit Status:

Not Exploited

References:

• https://patchstack.com/database/wordpress/plugin/import-users-from-csv-with-meta/vulnerability/wordpress-import-and-export-users-and-customers-plugin-1-27-12-sensitive-data-exposure-vulnerability?_s_id=cve

Recommended Action:

No proposed action available. Please refer to vendor documentation for updates.

---