Advisories · Technology

Smackcoders Inc. WP Ultimate CSV Importer.

Every CVE that names Smackcoders Inc. WP Ultimate CSV Importer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-45440 CVE record

CVSS 7.6 High

WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
- Smackcoders Inc. WP Ultimate CSV Importer
- SQL injection
Not analysed yet 10 Oct 2026
CVE-2026-103336 CVE record

CVSS 5.3 Medium

WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability
- Smackcoders Inc. WP Ultimate CSV Importer
- Information disclosure
Not analysed yet 1 Oct 2026