Plugin icon

Import All Pages, Post types, Products, Orders, and Users as XML & CSV

wp-ultimate-csv-importer

Vulnerabilities:

15

Last Updated:

November 21, 2023

Active Installs:

20000

Published
Title
Fixed in
Published
2023-08-03
Title
WP Ultimate CSV Importer < 7.9.9 - Author+ RCE
Fixed in
Fixed in 7.9.9
Published
2023-08-03
Title
WP Ultimate CSV Importer < 7.9.9 - Imported Files Disclosure
Fixed in
Fixed in 7.9.9
Published
2023-08-03
Title
WP Ultimate CSV Importer < 7.9.9 - Author+ Privilege Escalation
Fixed in
Fixed in 7.9.9
Published
2022-09-20
Title
Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation
Fixed in
Fixed in 6.5.8
Published
2022-09-20
Title
Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi
Fixed in
Fixed in 6.5.8
Published
2022-06-02
Title
WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRF
Fixed in
Fixed in 6.5.3
Published
2022-01-26
Title
WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 6.4.3
Published
2022-01-17
Title
WP Ultimate CSV Importer < 6.4.2 - Subscriber+ Arbitrary Option Deletion
Fixed in
Fixed in 6.4.2
Published
2022-01-12
Title
WP Ultimate CSV Importer < 6.4.1 - Subscriber+ Arbitrary File Upload
Fixed in
Fixed in 6.4.1
Published
2018-12-19
Title
WP Ultimate CSV Importer <= 5.6 - CSRF
Fixed in
Fixed in 5.6.1
Published
2016-01-27
Title
WP Ultimate CSV Importer <= 3.8.6 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.8.8
Published
2015-08-18
Title
WP Ultimate Csv Importer < 3.8.1 - XSS
Fixed in
Fixed in 3.8.1
Published
2015-05-05
Title
WP Ultimate CSV Importer < 3.7.3 - Various CSRF
Fixed in
Fixed in 3.7.3
Published
2015-04-27
Title
WP Ultimate CSV Importer < 3.7.1 - Directory Traversal
Fixed in
Fixed in 3.7.1
Published
2015-02-22
Title
WP Ultimate CSV Importer <= 3.6.74 - Database Table Export
Fixed in
Fixed in 3.6.75