Access violation vulnerability in WordPress Comments Import & Export 2.3.7

. The WordPress Comments Import & Export plugin for WordPress has a security vulnerability that allows attackers with Author-level access or higher to read sensitive information from any file on the server. This can happen during the comments import process because the plugin does not properly check the file path. The vulnerability was partially fixed in version 2.3.8 and fully fixed in 2.3.9.

Detected in:

Comments Import & Export fixed vulnerable versions:
WordPress Comments Import & Export fixed vulnerable versions: >= * <= 2.3.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.