CVE-2026-120554 high vulnerability summary
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.5.11 This is due to a non-atomic multi-option write sequence in the `ACUI_Cron:...
CVE-2026-120554 is a High severity vulnerability notice that security teams should triage for exposure in their own environments.
What to review
The affected area appears to involve The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions. Administrators should compare this notice against their asset inventory, dependency list, and externally exposed services.
Recommended action
Confirm whether the affected product or library is present, review vendor guidance, prioritize patching based on internet exposure and severity, and monitor logs for suspicious behavior tied to the affected component.
This brief is based on information from Tenable Newest CVEs . Please refer to the original source for the complete advisory and vendor-specific guidance.
Related Posts
Active Exploitation of Metabase Vulnerability
Attackers have been exploiting a critical vulnerability in Metabase to inject arbitrary SQL and gain administrator access. Patch immediately.
Active Exploitation of Vulnerability in Cisco Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense
Attackers are exploiting a high-severity vulnerability in Cisco Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense to trigger denial of service. Patch immediately.
CVE-2026-115498 high vulnerability summary
The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g-website (Website contact-field)' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitizatio...