Import and export users and customers vulnerabilities
We track 3 vulnerabilities in Import and export users and customers products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2026.
Latest Import and export users and customers vulnerabilities
- 7.2 High severity
Import and export users and customers: Improper Privilege Management
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in its front-end import functionality, allowing users with only the create_users capability to change the role of existing users, including pr
- 7.2 High severity
Import and export users and customers: Improper Privilege Management
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users capability when assigning roles during a CSV import, allowing users with only the create_users capability to create new administrator accounts
- 9.1 Critical severity
Import and export users and customers: Improper Privilege Management
The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account a