carazo vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20266

Newest CVEs

• CVE-2026-120554

  Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save

  carazo · Import and export users and customers

  High8.8
• CVE-2026-17001

  Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields

  carazo · Import and export users and customers

  Medium6.4
• CVE-2026-86583

  Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields

  carazo · Import and export users and customers

  High8.8
• CVE-2026-15026

  Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action

  carazo · Import and export users and customers

  Medium4.3
• CVE-2026-7641

  Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields

  carazo · Import and export users and customers

  High8.8
• CVE-2026-3629

  Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields

  carazo · Import and export users and customers

  High8.1
• CVE-2024-4656

  Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

  carazo · Import and export users and customers

  Medium4.4
• CVE-2024-4734

  Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

  carazo · Import and export users and customers

  Medium4.4
• CVE-2024-1050

  Import and export users and customers <= 1.26.5 - Missing Authorization

  carazo · Import and export users and customers

  Medium4.3
• CVE-2023-6583

  Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality

  carazo · Import and export users and customers

  Medium6.6