Unknown WP Ultimate CSV Importer

3 known vulnerabilities in Unknown WP Ultimate CSV Importer, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-80518 CVSS 3.7 low The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage location of the…
  • CVE-2026-80517 CVSS 3.5 low The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uploaded archive nor…
  • CVE-2026-80488 CVSS 4.1 medium The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in…