Skip to content

Known vulnerabilities in carazo Import and export users and customers

Is your version affected?

CVE Summary Score Published
CVE-2026-120554 Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save 8.8 High Nov 4, 2026
CVE-2026-17001 The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom… 6.4 Medium Oct 15, 2026
CVE-2026-86583 The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions… 8.8 High Sep 23, 2026
CVE-2026-15026 The Import and export users and customers plugin for WordPress is vulnerable to Sensitive Information Exposure in all… 4.3 Medium Jul 10, 2026
CVE-2026-7641 The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions… 8.8 High May 2, 2026
CVE-2026-3629 The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions… 8.1 High Mar 21, 2026
CVE-2024-4656 The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user… 4.4 Medium May 15, 2024
CVE-2024-4734 The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin… 4.4 Medium May 15, 2024
CVE-2024-1050 The Import and export users and customers plugin for WordPress is vulnerable to unauthorized modification of data due to… 4.3 Medium May 4, 2024
CVE-2023-6583 The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up… 6.6 Medium Jan 11, 2024
CVE-2023-6624 The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 4.9 Medium Jan 11, 2024