Carazo vulnerabilities

Products

• Import And Export Users And Customers 27

Newest

• carazo import and export users and customers Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save CVE-2026-120554 8.8 HighNovember 4, 2026
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-54862 6.5 MediumOctober 29, 2026
• carazo import and export users and customers Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields CVE-2026-17001 Public exploit 6.4 MediumOctober 15, 2026
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability CVE-2026-104757 7.2 HighOctober 6, 2026
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability CVE-2026-94178 7.5 HighSeptember 30, 2026
• carazo import and export users and customers Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile F… CVE-2026-86583 Public exploit 8.8 HighSeptember 23, 2026
• carazo import and export users and customers Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer CVE-2026-92541 7.2 HighSeptember 20, 2026
• carazo import and export users and customers Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_users CVE-2026-92540 7.2 HighSeptember 20, 2026
• carazo import and export users and customers Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar CVE-2026-16542 4.1 MediumSeptember 20, 2026
• carazo import and export users and customers Import and export users and customers < 2.4.3 - Admin+ Arbitrary File Read CVE-2025-15673 4.9 MediumAugust 3, 2026
• carazo import and export users and customers Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import CVE-2026-16534 9.1 CriticalAugust 3, 2026
• carazo import and export users and customers Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action CVE-2026-15026 4.3 MediumJuly 10, 2026
• carazo import and export users and customers Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields CVE-2026-7641 8.8 HighMay 2, 2026
• carazo import and export users and customers Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields CVE-2026-3629 Public exploit 8.1 HighMarch 21, 2026
• carazo import and export users and customers WordPress Import and export users and customers plugin 1.27.12 - Sensitive Data Exposure vulnerability CVE-2025-24689 5.9 MediumJanuary 27, 2025
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-50413 5.9 MediumOctober 29, 2024
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.26.8 - Sensitive Information via Imported File vulnerability CVE-2024-38787 7.5 HighAugust 13, 2024
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability CVE-2024-34815 5.4 MediumJune 11, 2024
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.24.6 - Broken Access Control vulnerability CVE-2024-22151 5.3 MediumJune 8, 2024
• carazo import and export users and customers Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-4656 4.4 MediumMay 15, 2024
• carazo import and export users and customers Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-4734 4.4 MediumMay 15, 2024
• carazo import and export users and customers Import and export users and customers <= 1.26.5 - Missing Authorization CVE-2024-1050 4.3 MediumMay 4, 2024
• carazo import and export users and customers WordPress Import and export users and customers plugin <= 1.26.2 - PHP Object Injection vulnerability CVE-2024-32817 4.4 MediumApril 24, 2024
• carazo import and export users and customers Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality CVE-2023-6583 6.6 MediumJanuary 11, 2024
• carazo import and export users and customers Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-6624 4.9 MediumJanuary 11, 2024
• carazo import and export users and customers Import and export users and customers < 1.20.5 - Subscriber+ CSV Injection CVE-2022-3558 8.0 HighNovember 7, 2022
• carazo import and export users and customers Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting CVE-2022-1255 4.8 MediumMay 2, 2022