Advisories · Technology
smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress.
Every CVE that names smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- SQL injection
- CVSS 6.4 Medium
WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypass
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Server-side request forgery (SSRF)
- CVSS 7.2 High
WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Insecure deserialization
- CVSS 4.3 Medium
WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Information disclosure
- CVSS 8.1 High
WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Path traversal
- CVSS 7.7 High
WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Broken access control
- CVSS 8.8 High
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Unrestricted file upload
- CVSS 8.1 High
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Path traversal
- CVSS 8.0 High
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Code injection
- CVSS 8.0 High
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Code injection
- CVSS 7.5 High
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Information disclosure
- CVSS 6.6 Medium
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation
- smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress
- Privilege escalation