139 matches found
CVE-2026-17001
The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile Fields in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
EUVD-2026-101840
The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile Fields in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2026-17001
The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.4.5 . The root cause is insufficient input sanitization and output escaping within the Custom Column User Meta Profile Fields . This allows authe...
CVE-2026-17001 Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields
The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile Fields in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
WordPress Import and Export Users and Customers 2.4.5 Cross Site Scripting
WordPress Import and Export Users and Customers plugin versions through 2.4.5 contain an authenticated stored cross site scripting vulnerability through custom column user meta profile fields...
WordPress Import and export users and customers plugin <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
Authenticated Custom+ Stored Cross-Site Scripting vulnerability discovered by Luca Laytynher LyT in WordPress Plugin Import and export users and customers versions = 2.4.5...
VulnCheck KEV: CVE-2026-3629
The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'saveextrauserprofilefields' function not properly restricting which user meta keys can be updated via profile fields. The...
CVE-2026-104757
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
CVE-2026-104757
The WordPress Import and export users and customers plugin (versions
CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
PT-2026-106381
Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...
WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Import and export users and customers versions = 2.5.5...
CVE-2026-94178
Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...
CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...
CVE-2026-94178
The WordPress Import and export users and customers plugin, versions
CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...
CVE-2026-94178: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...
PT-2026-103175
Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...
WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Intrudify in WordPress Plugin Import and export users and customers versions = 2.5.2...