CVE-2026-120554

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 2.5.11 . The flaw exists in the ACUI_Cron::save_settings() function due to a non-atomic multi-option write sequence . The function persists several settings—includi...

EUVD-2026-116806

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.5.11 This is due to a non-atomic multi-option write sequence in the ACUICron::savesettings function, which persists acuicronactivated, acuicronconfiguredby,...