WordPress Plugin Vulnerabilities

WP Ultimate CSV Importer <= 5.6 - CSRF

Description

The Import and Export WordPress Data as CSV or XML WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
wp-ultimate-csv-importer
Fixed in 5.6.1

References

CVE
CVE-2018-20967
URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=1997947%40wp-ultimate-csv-importer&old=1996452%40wp-ultimate-csv-importer

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
f6cd00c3-7119-4386-826a-4f24bd0cfcf2

Timeline

Publicly Published
2018-12-19 (about 7 years ago)
Added
2019-06-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-10-27
Title
ProfileGrid < 5.0.4 - Subscriber+ Private Message Read/Edition
Published
2025-09-22
Title
Grid < 2.3.2 - Cross-Site Request Forgery
Published
2025-01-16
Title
EmailShroud <= 2.2.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Published
2025-04-24
Title
Related Posts via Taxonomies <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-06-27
Title
Cyrlitera < 1.3.1 - Cross-Site Request Forgery