Advisories · Technology

WP Ultimate CSV Importer.

Every CVE that names WP Ultimate CSV Importer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-80518 CVE record

CVSS 3.7 Low

WP Ultimate CSV Importer < 9.2 - Unauthenticated Imported Data Disclosure via Predictable Log Path
- WP Ultimate CSV Importer
- Information disclosure
Not analysed yet 3 Oct 2026
CVE-2026-80517 CVE record

CVSS 3.5 Low

WP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG Upload
- WP Ultimate CSV Importer
- Cross-site scripting (XSS)
Not analysed yet 3 Oct 2026
CVE-2026-80488 CVE record

CVSS 4.1 Medium

WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields
- WP Ultimate CSV Importer
- SQL injection
Not analysed yet 29 Aug 2026