CVE-2026-3629 | carazo Import and Export Users and Customers Plugin up to 1.29.7 on WordPress save_extra_user_profile_fields privileges management

A vulnerability was found in carazo Import and Export Users and Customers Plugin up to 1.29.7 on WordPress. It has been classified as critical. Affected by this vulnerability is the function save_extra_user_profile_fields. The manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-3629. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.