https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:13:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343780 EUVD-2026-343780 https://cve.radiocsirt.org/vuln/euvd-2026-343780 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16534 <p>The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress&#39;s role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing administrator&#39;s password or email.</p> <p>The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress&#39;s role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing administrator&#39;s password or email.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16534 https://cve.radiocsirt.org/vuln/ghsa-xw98-5fp3-v7vg <p>The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress&#39;s role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing administrator&#39;s password or email.</p> <p>The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress&#39;s role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing administrator&#39;s password or email.</p> https://cve.radiocsirt.org/vuln/ghsa-xw98-5fp3-v7vg