medium4.1
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, whic…
Impact
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.
Affected products
| Product | Affected versions |
|---|---|
| WP Ultimate CSV Importer WordPress Plugin | before 9.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.