What’s Vulnerable › Products

WP Ultimate CSV Importer vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WP Ultimate CSV Importer version is affected

Latest WP Ultimate CSV Importer vulnerabilities

• CVE-2026-80518 — WP Ultimate CSV Importer < 9.2 - Unauthenticated Imported Data Disclosure via Predictable Log Path (CVSS 3.7)
• CVE-2026-80517 — WP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG Upload (CVSS 3.5)
• CVE-2026-80488 — WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields (CVSS 4.1)