Skip to content
Threat Feed
Subscribe

Product

Import and Export Users and Customers (<= 2.5.11)

1 brief RSS
high advisory

Import and export users and customers: Privilege escalation in ACUI_Cron (CVE-2026-120554)

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation due to a non-atomic configuration write sequence in the ACUI_Cron::save_settings() function that fails to authorize role changes before persistence.

PoC Import and export users and customers wordpress privilege-escalation cms
1t 1c