Input validation vulnerability in WordPress Comments Import & Export 2.4.3

The WordPress Comments Import & Export plugin is not secure because it allows anyone with certain levels of access to change data without permission. This vulnerability also allows attackers to insert harmful code onto the plugin’s settings page, which can then be executed by administrative users. The issue was partially fixed in version 2.4.3 and fully fixed in version 2.4.4.

Detected in:

Comments Import & Export fixed vulnerable versions:
WordPress Comments Import & Export fixed vulnerable versions: >= * <= 2.4.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.