Import CSV or XML Datafeed With Ease

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Import CSV or XML Datafeed With Ease

Information

Software Type Plugin
Software Slug wp-ultimate-csv-importer (view on wordpress.org)
Software Status Active
Software Author smackcoders
Software Website www.smackcoders.com
Software Downloads 1,575,355
Software Active Installs 20,000
Software Record Last Updated May 9, 2024

17 Vulnerabilities

WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution
8.0
CVE-2023-4142
Aug 3, 2023
Researcher: István Márton
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing
7.5
CVE-2023-4139
Aug 3, 2023
Researcher: István Márton
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation
6.6
CVE-2023-4140
Aug 3, 2023
Researcher: István Márton
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution
8.0
CVE-2023-4141
Aug 3, 2023
Researcher: István Márton
WP Ultimate CSV Importer <= 6.5.7 - Authenticated (Administrator+) SQL Injection
7.2
CVE-2022-3243
Sep 20, 2022
Researcher: Sanjay Das Payatu
WP Ultimate CSV Importer <= 6.5.7 - Missing Authorization
5.4
CVE-2022-3244
Sep 20, 2022
Researcher: Sanjay Das Payatu
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
4.1
CVE-2022-1977
Jun 2, 2022
Researcher: Luan Pedersini
WP Ultimate CSV Importer <= 6.4.2 - Admin+ Stored Cross-Site Scripting
4.8
CVE-2022-0360
Jan 26, 2022
Researcher: Felipe de Avila
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization
7.1
CVE ID Unknown
Jan 17, 2022
Researcher: WPScanTeam
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks
6.3
CVE ID Unknown
Jan 12, 2022
Researchers:
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload
8.8
CVE ID Unknown
Jan 12, 2022
Researchers:
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery
8.8
CVE-2018-20967
Aug 13, 2019
Researchers:
Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jan 27, 2018
Researcher: Rahul Pratap Singh
Easy Drag And drop All Import : WP Ultimate CSV Importer < 3.8.1 - Cross-Site Scripting
6.1
CVE-2015-9306
Aug 18, 2015
Researchers:
Import CSV or XML Datafeed With Ease <= 3.7.2 - Cross-Site Request Forgery
4.3
CVE-2015-10125
May 5, 2015
Researchers:
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read
7.5
CVE ID Unknown
Apr 27, 2015
Researcher: James Golovich
Ultimate CSV Importer < 3.6.75 - Information Disclosure
7.5
CVE ID Unknown
Feb 22, 2015
Researcher: James Hooker
Title CVE ID CVSS Researchers Date
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution CVE-2023-4142 8.0 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing CVE-2023-4139 7.5 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation CVE-2023-4140 6.6 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution CVE-2023-4141 8.0 István Márton August 3, 2023
WP Ultimate CSV Importer <= 6.5.7 - Authenticated (Administrator+) SQL Injection CVE-2022-3243 7.2 Sanjay Das Payatu September 20, 2022
WP Ultimate CSV Importer <= 6.5.7 - Missing Authorization CVE-2022-3244 5.4 Sanjay Das Payatu September 20, 2022
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery CVE-2022-1977 4.1 Luan Pedersini June 2, 2022
WP Ultimate CSV Importer <= 6.4.2 - Admin+ Stored Cross-Site Scripting CVE-2022-0360 4.8 Felipe de Avila January 26, 2022
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization 7.1 WPScanTeam January 17, 2022
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks 6.3 January 12, 2022
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload 8.8 January 12, 2022
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery CVE-2018-20967 8.8 August 13, 2019
Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting 6.1 Rahul Pratap Singh January 27, 2018
Easy Drag And drop All Import : WP Ultimate CSV Importer < 3.8.1 - Cross-Site Scripting CVE-2015-9306 6.1 August 18, 2015
Import CSV or XML Datafeed With Ease <= 3.7.2 - Cross-Site Request Forgery CVE-2015-10125 4.3 May 5, 2015
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read 7.5 James Golovich April 27, 2015
Ultimate CSV Importer < 3.6.75 - Information Disclosure 7.5 James Hooker February 22, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation