IA
Product
Import and export users and customers
10
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 6Low 0
Watch
Add Import and export users and customers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17001 | 6.4 | Oct 15 | Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields Affected: through 2.4.5 |
| CVE-2023-6624 | 5.4 | Jan 11 | Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Affected: through 1.24.3 |
| CVE-2024-4656 | 4.4 | May 15 | Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 1.26.6.1 |
| CVE-2024-4734 | 4.4 | May 15 | Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 1.26.6.1 |
| CVE-2026-15026 | 4.3 | Jul 10 | Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action Affected: through 2.4.0 |
| CVE-2024-1050 | 4.3 | May 4 | Import and export users and customers <= 1.26.5 - Missing Authorization Affected: through 1.26.5 |
Showing 6