Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Import and export users and customers 2.5.2 Clear all filters
TI-2026-62417 CVE-2026-92541 · GHSA-562f-rm3m-8jj6

Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer

Priority LOW 34

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in its front-end import functionality, allowing users with only the create_users capability to change…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-09-20 Fixed in 2.5.2 CWE-269
TI-2026-62416 CVE-2026-92540 · GHSA-ghcr-hgpj-8xjg

Improper privilege management in Import and export users and customers

Priority LOW 34

The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users capability when assigning roles during a CSV import, allowing users with only the create_users capabili…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00462 Published 2026-09-20 Fixed in 2.5.2 CWE-269