Import CSV or XML Datafeed With Ease

Information

Software Type Plugin
Software Slug wp-ultimate-csv-importer (view on wordpress.org)
Software Status Active
Software Author smackcoders
Software Website www.smackcoders.com
Software Downloads 1,496,937
Software Active Installs 20,000
Software Record Last Updated February 24, 2024

17 Vulnerabilities

8.8
CVE ID Unknown
Jan 12, 2022
Researchers:
7.5
CVE ID Unknown
Apr 27, 2015
Researcher: James Golovich
7.5
CVE ID Unknown
Feb 22, 2015
Researcher: James Hooker
Title CVE ID CVSS Researchers Date
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution CVE-2023-4142 8.0 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing CVE-2023-4139 7.5 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation CVE-2023-4140 6.6 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution CVE-2023-4141 8.0 István Márton August 3, 2023
WP Ultimate CSV Importer <= 6.5.7 - Authenticated (Administrator+) SQL Injection CVE-2022-3243 7.2 Sanjay Das Payatu September 20, 2022
WP Ultimate CSV Importer <= 6.5.7 - Missing Authorization CVE-2022-3244 5.4 Sanjay Das Payatu September 20, 2022
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery CVE-2022-1977 4.1 Luan Pedersini June 2, 2022
WP Ultimate CSV Importer <= 6.4.2 - Admin+ Stored Cross-Site Scripting CVE-2022-0360 4.8 Felipe de Avila January 26, 2022
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization 7.1 WPScanTeam January 17, 2022
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks 6.3 January 12, 2022
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload 8.8 January 12, 2022
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery CVE-2018-20967 8.8 August 13, 2019
Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting 6.1 Rahul Pratap Singh January 27, 2018
Easy Drag And drop All Import : WP Ultimate CSV Importer < 3.8.1 - Cross-Site Scripting CVE-2015-9306 6.1 August 18, 2015
Import CSV or XML Datafeed With Ease <= 3.7.2 - Cross-Site Request Forgery CVE-2015-10125 4.3 May 5, 2015
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read 7.5 James Golovich April 27, 2015
Ultimate CSV Importer < 3.6.75 - Information Disclosure 7.5 James Hooker February 22, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation