https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1973.htmlhttps://patchthecve.com/cve/CVE-2025-1973.htmlWed, 17 Jun 2026 08:40:27 +0000MEDIUM 4.9: The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrarhttps://patchthecve.com/cve/CVE-2025-1972.htmlhttps://patchthecve.com/cve/CVE-2025-1972.htmlWed, 17 Jun 2026 08:40:27 +0000LOW 2.7: The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.6.2. This makes it possible for authenticated attackers, with Administrator-level https://patchthecve.com/cve/CVE-2025-1971.htmlhttps://patchthecve.com/cve/CVE-2025-1971.htmlWed, 17 Jun 2026 08:40:27 +0000HIGH 7.2: The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via deserialization of untrusted input from the 'form_data' parameter. This makes it possible for authenticated attackers, with Administrator-level access https://patchthecve.com/cve/CVE-2025-1970.htmlhttps://patchthecve.com/cve/CVE-2025-1970.htmlWed, 17 Jun 2026 08:40:27 +0000HIGH 7.6: The Export and Import Users and Customers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.2 via the validate_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web request