VendorsSmackcoderswp_ultimate_csv_importerany version
Vulnerabilities

Smackcoders WP Ultimate CSV Importer any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-4141
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution
Published 2023-08-04 · Modified
8.8EPSS 0.016
CVE-2023-4142
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution
Published 2023-08-04 · Modified
8.8EPSS 0.016
CVE-2023-4140
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation
Published 2023-08-04 · Modified
8.8EPSS 0.008
CVE-2023-4139
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing
Published 2023-08-04 · Modified
7.5EPSS 0.007