We will use this forum post to notify you if we are presented with any legitimate claims about a vulnerability. In the meanwhile, StaffList is a plugin that helps site owners publish a full directory of their staff/faculty. Before using the plugin, we urge you to consider whether or not this information is too sensitive to be shared.
You will only have the option of appending imported records if the columns are the same between your existing dataset and the spreadsheet you’re importing. Otherwise, you’ll be replacing the records. Most users will maintain a spreadsheet of their staff records offline, and can safely replace the entire dataset with larger changes/updates, rather than using the plugin tools to adjust one at a time.
Regarding editing column names: Some columns are standard. Some columns are non-standard (the ones you can name to suit your needs). You can choose which columns appear in your StaffList, and which order.
