CVE-2026-104368 | WebToffee Export and Import Users and Customers Plugin up to 2.7.5 on WordPress CSV Export Import class-csvwriter.php hf_create_customer privileges management (EUVD-2026-113707)

October 30, 2026 Yanac

A vulnerability categorized as critical has been discovered in WebToffee Export and Import Users and Customers Plugin up to 2.7.5 on WordPress. The affected element is the function hf_create_customer of the file class-csvwriter.php of the component CSV Export Import. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-104368. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More