Skip to content
Threat Feed
Subscribe

Product

WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel Plugin (<= 8.0.1)

1 brief RSS
high advisory

Remote Code Execution in WP Ultimate CSV Importer WordPress Plugin

The WP Ultimate CSV Importer - WordPress Import & Export for CSV, XML & Excel plugin for WordPress, versions up to and including 8.0.1, is vulnerable to Remote Code Execution due to missing capability checks on specific AJAX handlers and exposure of the plugin's nonce, allowing authenticated attackers with subscriber-level access to execute arbitrary code on the server.

WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin wordpress plugin rce cve network
1r 2t 1c