Medium
CVE-2026-104757
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 32
Reset filters
Medium
CVE-2026-94178
Import and export users and customers <= 2.5.2 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-86583
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
Medium
CVE-2026-16542
Import and export users and customers <= 2.4.4 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2026-92541
Import and export users and customers <= 2.5.1 - Authenticated (Admin+) Privilege Escalation
High
CVE-2026-92540
Import and export users and customers <= 2.5.1 - Authenticated (Admin+) Privilege Escalation
Medium
CVE-2025-15673
Import and export users and customers < 2.4.3 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2026-16534
Import and export users and customers <= 2.4.1 - Authenticated (Admin+) Privilege Escalation
Medium
CVE-2026-15026
Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action
High
CVE-2026-7641
Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields
High
CVE-2026-3629
Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields
Medium
CVE-2025-24689
Import and export users and customers <= 1.27.12 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-50413
Import and export users and customers <= 1.27.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-38787
Import and export users and customers <= 1.26.8 - Unauthenticated Information Exposure
Medium
CVE-2024-4734
Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4656
Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34815
Import and export users and customers <= 1.26.5 - Missing Authorization
Medium
CVE-2024-1050
Import and export users and customers <= 1.26.5 - Missing Authorization
High
CVE-2024-32817
Import and export users and customers <= 1.26.2 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2024-22151
Import and export users and customers <= 1.24.6 - Missing Authorization via fire_cron REST endpoint
Medium
CVE-2023-6624
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
High
CVE-2022-3558
Import and export users and customers <= 1.20.4 - Authenticated (Subscriber+) CSV Injection
Medium
CVE-2022-1255
Import and export users and customers <= 1.19.2 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.