CVE-2026-17001 | Carazo Import and Export Users and Customers Plugin up to 2.4.5 on WordPress Custom Column User Meta Profile Fields cross site scripting

October 15, 2026 Yanac

A vulnerability was found in Carazo Import and Export Users and Customers Plugin up to 2.4.5 on WordPress. It has been classified as problematic. The affected element is an unknown function of the component Custom Column User Meta Profile Fields. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-17001. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More