All 5 CVE vulnerabilities found in WP Ultimate CSV Importer, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-45440 | WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability CWE-89 | 7.6 | High | 2026-10-10 |
| CVE-2026-80517 | WP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG Upload | - | - | 2026-10-03 |
| CVE-2026-80518 | WP Ultimate CSV Importer < 9.2 - Unauthenticated Imported Data Disclosure via Predictable Log Path | - | - | 2026-10-03 |
| CVE-2026-103336 | WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability CWE-201 | 5.3 | Medium | 2026-10-01 |
| CVE-2026-80488 | WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields | - | - | 2026-08-29 |
All 5 known CVE vulnerabilities affecting WP Ultimate CSV Importer with full Chinese analysis, references, and POCs where available.