CVE-2026-104757

Javier Carazo Import and export users and customers

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

7.2 High · CVSS 3.1, patchstack.com

Description

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.

References

patchstack.com/database/wordpress/plugin/import-users-from-csv-with-meta/vulnerability/wordpress-import-and-export-users-and-customers-plugin-2-5-5-privilege-escalation-vulnerability?_s_id=cve