Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

carazo Vulnerabilities & CVE List (Nov 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-120554`Import and export users and customers <= 2.5.11 - Authenticated (Custom+) Privilege Escalation via Non-Atomic Cron Settings Save	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers	Published11/04/2026	SeverityHigh
`CVE-2026-17001`Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2026-86583`Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2026-15026`Import and export users and customers <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via email_template_selected AJAX Action	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2026-7641`Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2026-3629`Import and export users and customers <= 1.29.7 - Privilege Escalation to Administrator via save_extra_user_profile_fields	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2024-4734`Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2024-4656`Import and export users and customers <= 1.26.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2024-1050`Import and export users and customers <= 1.26.5 - Missing Authorization	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers	Published
`CVE-2023-6624`Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers
`CVE-2023-6583`Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality	Exploitation statusNot exploited	FixYes	Affected productImport and export users and customers

11 Results | Page 1 of 1

Security vulnerabilities from carazo

carazo

Verify to analyze this security profile

How many security vulnerabilities does carazo have?

Which carazo product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular carazo products