Lucene search
+L

79 matches found

NVD
NVD
β€’added 2026/10/06 9:17 a.m.β€’3 views

CVE-2026-104757

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

7.2CVSS0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2026/10/06 8:35 a.m.β€’6 views

CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

7.2CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE
β€’added 2026/10/06 8:35 a.m.β€’3 views

CVE-2026-104757

The WordPress Import and export users and customers plugin (versions

7.2CVSS0.00316EPSS
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/10/05 12:26 p.m.β€’20 views

CVE-2026-3629

CVE-2026-3629 - Comprobador de Escalada de Privilegios en WordPress Una herramienta de lΓ­nea de comandos para detectar CVE-2026-3629 , una vulnerabilidad crΓ­tica de escalada de privilegios en el plugin de WordPress "Import and export users and customers". πŸ“’ Únete a Nuestra Comunidad Β‘Mantente al...

8.1CVSS6.3AI score0.0054EPSS
SaveExploits1References2
NVD
NVD
β€’added 2026/09/30 1:17 p.m.β€’5 views

CVE-2026-94178

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

7.5CVSS0.00304EPSS
SaveExploits0References1
CVE
CVE
β€’added 2026/09/30 12:27 p.m.β€’11 views

CVE-2026-94178

The WordPress Import and export users and customers plugin, versions

7.5CVSS5.8AI score0.00304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2026/09/30 12:27 p.m.β€’6 views

CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

7.5CVSS5.8AI score0.00304EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2026/09/30 12:27 p.m.β€’35 views

CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

7.5CVSS0.00304EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2026/09/30 12:00 a.m.β€’5 views

CVE-2026-94178: Incorrect Privilege Assignment

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

7.5CVSS5.8AI score0.00304EPSS
SaveExploits0References2
Patchstack
Patchstack
β€’added 2026/09/24 11:50 a.m.β€’20 views

WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Intrudify in WordPress Plugin Import and export users and customers versions = 2.5.2...

7.5CVSS5.9AI score0.00304EPSS
SaveExploits0Affected Software1
EUVD
EUVD
β€’added 2026/09/24 12:30 a.m.β€’19 views

EUVD-2026-85704

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

8.8CVSS5.7AI score0.00333EPSS
SaveExploits0References8
NVD
NVD
β€’added 2026/09/23 10:16 p.m.β€’19 views

CVE-2026-86583

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

8.8CVSS0.00333EPSS
SaveExploits0References7
CVE
CVE
β€’added 2026/09/23 9:27 p.m.β€’42 views

CVE-2026-86583

The Import and export users and customers plugin for WordPress (versions up to and including 2.4.17 ) is vulnerable to Privilege Escalation . The root cause is an escape character mismatch during the plugin's export and re-import workflow: the exporter uses fputcsv() with a NUL byte as an escape ...

8.8CVSS5.7AI score0.00333EPSS
SaveExploits0References7
Cvelist
Cvelist
β€’added 2026/09/23 9:27 p.m.β€’38 views

CVE-2026-86583 Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

8.8CVSS0.00333EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
β€’added 2026/09/23 9:27 p.m.β€’10 views

CVE-2026-86583 Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

8.8CVSS5.7AI score0.00333EPSS
SaveExploits0References7
Patchstack
Patchstack
β€’added 2026/09/23 1:53 p.m.β€’14 views

WordPress Import and export users and customers plugin <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by khanhnv in WordPress Plugin Import and export users and customers versions = 2.4.17...

8.8CVSS5.8AI score0.00333EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
β€’added 2026/09/23 12:00 a.m.β€’3 views

PT-2026-97604

Name of the Vulnerable Software and Affected Versions Import and export users and customers plugin for WordPress versions prior to 2.4.18 Description An issue exists in the export and re-import workflow that allows authenticated users with Subscriber-level access or higher to escalate their...

8.8CVSS5.6AI score0.00333EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2026/09/23 12:00 a.m.β€’7 views

CVE-2026-86583: Incorrect Privilege Assignment

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

8.8CVSS5.7AI score0.00333EPSS
SaveExploits0References2
Patchstack
Patchstack
β€’added 2026/09/22 11:11 a.m.β€’12 views

WordPress Import and export users and customers plugin < 2.5.2 - Custom Role Privilege Escalation to Administrator vulnerability

Custom Role Privilege Escalation to Administrator vulnerability discovered by BINESH MADHARAPU in WordPress Plugin Import and export users and customers versions 2.5.2...

7.2CVSS5.8AI score0.00462EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
β€’added 2026/09/22 10:46 a.m.β€’6 views

WordPress Import and export users and customers plugin < 2.5.2 - Custom Role Privilege Escalation to Administrator vulnerability

Custom Role Privilege Escalation to Administrator vulnerability discovered by yzx001 in WordPress Plugin Import and export users and customers versions 2.5.2...

7.2CVSS5.8AI score0.00462EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder