CVE-2026-92541High 7.2Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer0.5%
CVE-2026-92540High 7.2Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_users0.5%
CVE-2026-16542Medium 4.1Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar0.3%
CVE-2025-15673Medium 4.9Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read0.5%
CVE-2026-16534Critical 9.1Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import0.4%
CVE-2022-3558High 8.0Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection1.3%
CVE-2022-1255UnratedImport and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting0.7%