CA
Vendor
carazo
10
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-17001 | IA Import and export users and customers carazo | 6.4 | Oct 15 | Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields |
| CVE-2026-86583 | IA Import and export users and customers carazo | 8.8 | Sep 23 | Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields |
| CVE-2026-15026 | IA Import and export users and customers carazo | 4.3 | Jul 10 | Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action |
| CVE-2026-7641 | IA Import and export users and customers carazo | 8.8 | May 2 | Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields |
| CVE-2026-3629 | IA Import and export users and customers carazo | 8.1 | Mar 21 | Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields |
| CVE-2024-4656 | IA Import and export users and customers carazo | 4.4 | May 15 | Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2024-4734 | IA Import and export users and customers carazo | 4.4 | May 15 | Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2024-1050 | IA Import and export users and customers carazo | 4.3 | May 4 | Import and export users and customers <= 1.26.5 - Missing Authorization |
| CVE-2023-6583 | IA Import and export users and customers carazo | 7.2 | Jan 11 | Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality |
| CVE-2023-6624 | IA Import and export users and customers carazo | 5.4 | Jan 11 | Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode |