CYBERHAWK / CVE / CVE-2026-7641

CVE-2026-7641

Import and Export Users Plugin

HIGH CVSS 8.8 vibe

The flaw

Privilege escalation via incomplete blocklist for multisite capability meta keys.

What to do

Update WordPress Import and Export Users plugin to version 2.0.9 or later

▸ Scan my repo for CVE-2026-7641

References

First seen 2026-05-08 · Tracked by PickBits CyberHawk · Weekly CVE digest