CVE-2026-104368

The Export and Import Users and Customers plugin for WordPress (versions $≤$ 2.7.5 ) is vulnerable to Privilege Escalation via a CSV escape-character mismatch during the export and re-import workflow. The issue occurs because class-csvwriter.php uses PHP's default backslash (\) as an escape chara...