EUVD-2026-14256

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'saveextrauserprofilefields' function not properly restricting which user meta keys can be updated via profile fields. The...

CVE-2026-32891

creationtimestamp| type| source ---|---|--- 2026-03-22 00:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmaidv4m52c 2026-03-27 17:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2lroscrz2q...

CVE-2026-4213

creationtimestamp| type| source ---|---|--- 2026-03-22 00:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmah5rlyp2i...

CVE-2026-3629

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'saveextrauserprofilefields' function not properly restricting which user meta keys can be updated via profile fields. The...

CVE-2026-3629

CVE-2026-3629 describes a privilege-escalation flaw in the WordPress plugin “Import and export users and customers” up to version 1.29.7. The root cause is that the function save_extra_user_profile_fields does not properly restrict which user meta keys can be updated via profile fields; specifica...

CVE-2026-3629 Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'saveextrauserprofilefields' function not properly restricting which user meta keys can be updated via profile fields. The...

CVE-2026-3629

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'saveextrauserprofilefields' function not properly restricting which user meta keys can be updated via profile fields. The...

CVE-2026-33002

creationtimestamp| type| source ---|---|--- 2026-03-21 18:44:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mhlorq4jdy2i...

CVE-2026-4516

creationtimestamp| type| source ---|---|--- 2026-03-21 17:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhllyh6udy27...

CVE-2019-25579

creationtimestamp| type| source ---|---|--- 2026-03-21 16:19:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlgofjhq527 2026-03-24 02:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhrkcx3qcn2d...

CVE-2019-25559

creationtimestamp| type| source ---|---|--- 2026-03-21 15:41:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlem77yhg2v...

CVE-2019-25561

creationtimestamp| type| source ---|---|--- 2026-03-21 15:36:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhledashew2y...

CVE-2019-25572

creationtimestamp| type| source ---|---|--- 2026-03-21 15:09:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlcspyet72e...

CVE-2019-25557

creationtimestamp| type| source ---|---|--- 2026-03-21 15:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhlcgbc3oj2u...

CVE-2026-1648

creationtimestamp| type| source ---|---|--- 2026-03-21 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116266344664933412 2026-03-21 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhko6ct2x32w...

CVE-2026-30872

creationtimestamp| type| source ---|---|--- 2026-03-21 08:42:55+00:00| seen| https://bsky.app/profile/pee.mastodon.online.ap.brid.gy/post/3mhkn6tfvzkg2...

CVE-2026-4510

creationtimestamp| type| source ---|---|--- 2026-03-21 08:04:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhkl2dvlcr2n...

CVE-2026-32899

creationtimestamp| type| source ---|---|--- 2026-03-21 04:27:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk6w3iwbn2n 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2026-4261 Expire Users <= 1.2.2 - Authenticated (Subscriber+) Privilege Escalation to Administrator via save_extra_user_profile_fields

The Expire Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.2. This is due to the plugin allowing a user to update the 'onexpiredefaulttorole' meta through the 'saveextrauserprofilefields' function. This makes it possible for authenticated...

CVE-2026-32045

creationtimestamp| type| source ---|---|--- 2026-03-21 03:10:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhk2mi65ag2e 2026-03-21 06:44:39+00:00| seen| https://bsky.app/profile/printy.margin.cafe/post/3mhkglezkno27 2026-03-22 03:00:05+00:00| seen|...