1. Home
  2. CVE Database
  3. CVE-2023-4139
HIGH · 7.5

CVE-2023-4139

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing due to missing restriction in export folder indexing in versions up to, and inc...

Vulnerability Description

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing due to missing restriction in export folder indexing in versions up to, and including, 7.9.8. This makes it possible for unauthenticated attackers to list and view exported files.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SmackcodersWp Ultimate Csv Importer<= 7.9.8

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2023-4139?

CVE-2023-4139 is a vulnerability with a CVSS score of 7.5 (HIGH). The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing due to missing restriction in export folder indexing in versions up to, and inc...

How severe is CVE-2023-4139?

CVE-2023-4139 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4139?

Check the references section above for vendor advisories and patch information. Affected products include: Smackcoders Wp Ultimate Csv Importer.