C
Vendor security profile
carazo
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
1
CVE KEV
CVE severity distribution
2toplam CVE
High1 (50%)
Medium1 (50%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.4
CVE-2026-17001
Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields
C
Patch status unknown
7.2
CVE-2026-104757
WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability
JC
Patch status unknownEPSS %0
7.5
CVE-2026-94178
WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability
JC
Patch status unknownEPSS %0
8.8
CVE-2026-86583
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
C
Patch status unknownEPSS %0