Skip to content
Threat Feed
Subscribe

Product

Export and Import Users and Customers (<= 2.7.5)

1 brief RSS
high advisory

Export and Import Users and Customers: Privilege escalation in CSV import (CVE-2026-104368)

A CSV parsing vulnerability in the WordPress Export and Import Users and Customers plugin (<= 2.7.5) allows authenticated attackers to escalate privileges to Administrator by injecting malicious records into exported user files.

Export and Import Users and Customers
1t 1c