Advisories · Technology
carazo Import and export users and customers.
Every CVE that names carazo Import and export users and customers among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save
- carazo Import and export users and customers
- Broken access control
- CVSS 6.4 Medium
Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields
- carazo Import and export users and customers
- Cross-site scripting (XSS)
- CVSS 8.8 High
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile…
- carazo Import and export users and customers
- Privilege escalation
- CVSS 4.3 Medium
Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action
- carazo Import and export users and customers
- Broken access control
- CVSS 8.8 High
Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields
- carazo Import and export users and customers
- Privilege escalation
- CVSS 8.1 High
Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields
- carazo Import and export users and customers
- Privilege escalation
- CVSS 4.4 Medium
Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- carazo Import and export users and customers
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- carazo Import and export users and customers
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Import and export users and customers <= 1.26.5 - Missing Authorization
- carazo Import and export users and customers
- Broken access control
- CVSS 6.6 Medium
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
- carazo Import and export users and customers
- File inclusion
- CVSS 4.9 Medium
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
- carazo Import and export users and customers
- Cross-site scripting (XSS)