Ccarazo

Products

Exploited and recent CVEs

• CVE-2026-120554 High 8.8 Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save 0.6%
• CVE-2026-17001 Medium 6.4 Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields 0.2%
• CVE-2026-86583 High 8.8 Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields 0.4%
• CVE-2026-15026 Medium 4.3 Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action 0.4%
• CVE-2026-7641 High 8.8 Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields 0.7%
• CVE-2026-3629 High 8.1 Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields 0.4%
• CVE-2024-4656 Medium 4.4 Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2024-4734 Medium 4.4 Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2024-1050 Medium 4.3 Import and export users and customers <= 1.26.5 - Missing Authorization 0.4%
• CVE-2023-6583 Medium 6.6 Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality 0.8%
• CVE-2023-6624 Medium 4.9 Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode 0.3%