Input validation vulnerability in Import and export users and customers 1.24.2

The Import and Export Users and Customers plugin for WordPress is a tool used to transfer information about users and customers between WordPress websites. A security vulnerability has been discovered in versions of the plugin up to and including 1.24.2. This vulnerability can be exploited by attackers who have administrator access and above, allowing them to read and delete the contents of any file on the server, including one which may contain sensitive information known as wp-config.php.