wp-ultimate-csv-importer vulnerabilities
CVEs whose affected-version data names the wp-ultimate-csv-importer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-45440High· 7.6Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
▾ TwilightSmackcoders Inc. · wp-ultimate-csv-importerEPSS 0.28%via NVD
CVE-2026-103336Medium· 5.3Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc
Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1.
▾ SunlitSmackcoders Inc. · wp-ultimate-csv-importerEPSS 0.20%via NVD