Vulnerabilities / WP Ultimate CSV Importer
WP Ultimate CSV Importer vulnerabilities
Advisories WPSec published for WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export. Other sources may list more. Its attack surface: WP Ultimate CSV Importer on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0106 | WP Ultimate CSV Importer <= 9.1 - Unauthenticated Sensitive Information Exposure via Import Files and Logs | Low 3.7 | 9.2 |
| 2026-10-01 | WPSEC-2026-0105 | WP Ultimate CSV Importer <= 9.1 - Unauthenticated Sensitive Information Exposure via Single Post CSV Export | Medium 5.3 | 9.2 |
License: CC BY 4.0