CVE-2026-3629 — The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'save_extra_user_profile_field — CVE Database · The Intelligence Room