CyberSecBulletin

POUCO Import Users vulnerabilities

We track 1 vulnerability in POUCO Import Users products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest POUCO Import Users vulnerabilities

  • 9.8 Critical severity

    POUCO Import Users: Improper Privilege Management

    CVE-2026-16256POUCO Import Users

    The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update WordPress accounts, and it trusts an attacker-supplied role value, allowing unauthen