The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.
PHP
WordPress
Information Disclosure
Import Export Wordpress Users
Wordpress Plugin
+1
NVD
CVSS 3.1
2.7
EPSS
0.3%