Skip to content

CVE-2026-120554

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 4, 2026
Last Seen
November 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to and including 2.5.11. This vulnerability arises from a non-atomic multi-option write sequence in the `ACUI_Cron::save_settings()` function, allowing authenticated attackers with...

Public Exploits

Checking GitHub for proof-of-concept code…