Products: 1
    Vulnerabilities: 8
    Known Exploited: 0
    0
    Critical Level Threats
    5
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-120554

    Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save

    Last Modified: Nov 04, 2026
    Published: Nov 04, 2026

    CVE-2026-17001

    Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields

    Last Modified: Oct 23, 2026
    Published: Oct 15, 2026

    CVE-2026-104757

    WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

    Last Modified: Oct 06, 2026
    Published: Oct 06, 2026

    CVE-2026-86583

    Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields

    Last Modified: Sep 24, 2026
    Published: Sep 23, 2026

    CVE-2025-15673

    Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read

    Last Modified: Aug 04, 2026
    Published: Aug 03, 2026
    Items Per Page
    Carazo Vulnerabilities & Security CVEs | CVE-DB