All Import Export Suite for CSV and XML Datafeed

Information

Software Type Plugin
Software Slug wp-ultimate-csv-importer (view on wordpress.org)
Software Status Active
Software Author smackcoders
Software Website www.smackcoders.com
Software Downloads 1,729,373
Software Active Installs 20,000
Software Record Last Updated November 21, 2024

17 Vulnerabilities

8.8
CVE ID Unknown
Jan 12, 2022
Researchers:
7.5
CVE ID Unknown
Apr 27, 2015
Researcher: James Golovich
7.5
CVE ID Unknown
Feb 22, 2015
Researcher: James Hooker
Title Status CVE ID CVSS Researchers Date
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload Patched 8.8 January 12, 2022
Easy Drag And drop All Import : WP Ultimate CSV Importer <= 5.6 - Cross-Site Request Forgery Patched CVE-2018-20967 8.8 August 13, 2019
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution Patched CVE-2023-4142 8.0 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution Patched CVE-2023-4141 8.0 István Márton August 3, 2023
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing Patched CVE-2023-4139 7.5 István Márton August 3, 2023
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read Patched 7.5 James Golovich April 27, 2015
Ultimate CSV Importer < 3.6.75 - Information Disclosure Patched 7.5 James Hooker February 22, 2015
WP Ultimate CSV Importer <= 6.5.7 - Authenticated (Administrator+) SQL Injection Patched CVE-2022-3243 7.2 Sanjay Das Payatu September 20, 2022
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization Patched 7.1 WPScanTeam January 17, 2022
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation Patched CVE-2023-4140 6.6 István Márton August 3, 2023
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks Patched 6.3 January 12, 2022
Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting Patched 6.1 Rahul Pratap Singh January 27, 2018
Easy Drag And drop All Import : WP Ultimate CSV Importer < 3.8.1 - Cross-Site Scripting Patched CVE-2015-9306 6.1 August 18, 2015
WP Ultimate CSV Importer <= 6.5.7 - Missing Authorization Patched CVE-2022-3244 5.4 Sanjay Das Payatu September 20, 2022
WP Ultimate CSV Importer <= 6.4.2 - Admin+ Stored Cross-Site Scripting Patched CVE-2022-0360 4.8 Felipe de Avila January 26, 2022
Import CSV or XML Datafeed With Ease <= 3.7.2 - Cross-Site Request Forgery Patched CVE-2015-10125 4.3 May 5, 2015
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery Patched CVE-2022-1977 4.1 Luan Pedersini June 2, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation