IA
Product
Import and export users and customers
by Codection · last CVE Oct 29, 2026
9
CVEs
0
On KEV
8.0
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch

Add Import and export users and customers to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54862
New
6.5–Oct 29
WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.5.9
CVE-2023-6624
5.4
0%
Jan 11
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Affected: through 1.24.3
CVE-2024-22151
5.3
0%
Jun 8
WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability
Affected: through 1.24.6
CVE-2022-1255
4.8
1%
May 2
The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import…
Affected: before 1.19.2.1
CVE-2024-4734
4.4
0%
May 15
Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: through 1.26.6.1
Showing 5