https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:30:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-283774 EUVD-2026-283774 https://cve.radiocsirt.org/vuln/euvd-2026-283774 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3629 <p>The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the &#39;save_extra_user_profile_fields&#39; function not properly restricting which user meta keys can be updated via profile fields. The &#39;get_restricted_fields&#39; method does not include sensitive meta keys such as &#39;wp_capabilities&#39;. This makes it possible for unauthenticated attackers to escalate their privileges to Administrator by submitting a crafted registration request that sets the &#39;wp_capabilities&#39; meta key. The vulnerability can only be exploited if the &#34;Show fields in profile&#34; setting is enabled and a CSV with a wp_capabilities column header has been previously imported.</p> <p>The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the &#39;save_extra_user_profile_fields&#39; function not properly restricting which user meta keys can be updated via profile fields. The &#39;get_restricted_fields&#39; method does not include sensitive meta keys such as &#39;wp_capabilities&#39;. This makes it possible for unauthenticated attackers to escalate their privileges to Administrator by submitting a crafted registration request that sets the &#39;wp_capabilities&#39; meta key. The vulnerability can only be exploited if the &#34;Show fields in profile&#34; setting is enabled and a CSV with a wp_capabilities column header has been previously imported.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3629 https://cve.radiocsirt.org/vuln/ghsa-974q-2m48-3288 <p>The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the &#39;save_extra_user_profile_fields&#39; function not properly restricting which user meta keys can be updated via profile fields. The &#39;get_restricted_fields&#39; method does not include sensitive meta keys such as &#39;wp_capabilities&#39;. This makes it possible for unauthenticated attackers to escalate their privileges to Administrator by submitting a crafted registration request that sets the &#39;wp_capabilities&#39; meta key. The vulnerability can only be exploited if the &#34;Show fields in profile&#34; setting is enabled and a CSV with a wp_capabilities column header has been previously imported.</p> <p>The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the &#39;save_extra_user_profile_fields&#39; function not properly restricting which user meta keys can be updated via profile fields. The &#39;get_restricted_fields&#39; method does not include sensitive meta keys such as &#39;wp_capabilities&#39;. This makes it possible for unauthenticated attackers to escalate their privileges to Administrator by submitting a crafted registration request that sets the &#39;wp_capabilities&#39; meta key. The vulnerability can only be exploited if the &#34;Show fields in profile&#34; setting is enabled and a CSV with a wp_capabilities column header has been previously imported.</p> https://cve.radiocsirt.org/vuln/ghsa-974q-2m48-3288