Qlstudio Export User Data vulnerabilities

• qlstudio export user data WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability CVE-2026-65552 9.8 CriticalAugust 6, 2026
• qlstudio export user data Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field CVE-2026-12240 8.0 HighJune 30, 2026