WP Ultimate CSV Importer vulnerabilities
We track 1 vulnerability in WP Ultimate CSV Importer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest WP Ultimate CSV Importer vulnerabilities
- 7.2 High severity
WP Ultimate CSV Importer: Improper Control of Generation of Code
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not restrict the destination filename and extension, nor validate the fetched content type, when importing remote media, allowing an Administrator of a Multisite subsite to write and execute arbitra