Search
Search Results (1 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-80488 | 2 Wordpress, Wp Ultimate Csv Importer Project | 2 Wordpress, Wp Ultimate Csv Importer | 2026-09-01 | 4.1 Medium |
| The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks. | ||||
Page 1 of 1.