CVE-2026-16542 | Import and Export Users and Customers Plugin up to 2.4.4 on WordPress CSV Import server-side request forgery

September 20, 2026 Yanac

A vulnerability marked as problematic has been reported in Import and Export Users and Customers Plugin up to 2.4.4 on WordPress. Affected by this issue is some unknown functionality of the component CSV Import. This manipulation causes server-side request forgery.

This vulnerability appears as CVE-2026-16542. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More