CVE-2026-120554 | carazo Import and Export Users and Customers Plugin up to 2.5.11 on WordPress Cron ACUI_Cron::save_settings privileges management

A vulnerability classified as critical was found in carazo Import and Export Users and Customers Plugin up to 2.5.11 on WordPress. Impacted is the function ACUI_Cron::save_settings of the component Cron Handler. Such manipulation leads to improper privilege management.

This vulnerability is listed as CVE-2026-120554. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More