CVE-2026-16534

The Import and export users and customers WordPress plugin versions prior to 2.4.2 contains a privilege escalation vulnerability. The root cause is a failure to enforce WordPress's role-assignment and per-user edit permissions during CSV imports. This allows an attacker with only the user-creatio...