CVE WATCH / VULNERABILITY DETAIL
CVE-2026-104368
HIGHCVSS 8.8NVD feed
Published 30 October 2026 · tracked since 30 October 2026
Description
The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.7.5 via the plugin's own export and re-import workflow. The vulnerability exists because of a CSV escape-character mismatch between the exporter and the import
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-59387 HIGH 8.8
- CVE-2026-97645 HIGH 7.2
- CVE-2026-89435 HIGH 8.8
- CVE-2026-90437 HIGH 7.2
- CVE-2026-116622 HIGH 7.2
- CVE-2026-110732 HIGH 7.5
- CVE-2026-103039 CRITICAL 9.8
- CVE-2026-118698 MEDIUM 6.5
- CVE-2026-119059 MEDIUM 4.3
- CVE-2026-119087 MEDIUM 4.3