CVE-2026-120554 - Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save
CVE ID :CVE-2026-120554 Published : Nov. 4, 2026, 10:17 a.m. | 47 minutes ago Description :The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.5.11 This is due to a non-atomic multi-option write sequence...