WP Ultimate CSV Importer Vulnerabilities
The WP Ultimate CSV Importer WordPress plugin has 5 known security vulnerabilities. The most recent was disclosed on January 17, 2022. Check whether your site runs an affected version below.
View WP Ultimate CSV Importer on WordPress.orgSummary
Latest vulnerability disclosed on January 17, 2022.
Recommendation
WPSentry recommends installing with caution
Use WP Ultimate CSV Importer only with care. This plugin has a history of high-severity vulnerabilities — always run the latest version and monitor it for newly disclosed issues.
Is your site affected?
Run a free external scan to detect WP Ultimate CSV Importer and 35+ other WordPress security checks — no login or plugin required.
Known WP Ultimate CSV Importer vulnerabilities
- high
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization
Affected versions: <=6.4.1Disclosed January 17, 2022 - high
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload
Affected versions: <=6.4.0Disclosed January 12, 2022 - medium
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks
Affected versions: <6.4.1Disclosed January 12, 2022 - high
WP Ultimate CSV Importer <= 3.7 - Arbitrary File Read
Affected versions: <=3.7Disclosed April 27, 2015 - high
Ultimate CSV Importer < 3.6.75 - Information Disclosure
Affected versions: <3.6.75Disclosed February 22, 2015
How to stay protected
Update promptly
Keep WP Ultimate CSV Importer on its latest release — most vulnerabilities are fixed in newer versions.
Scan regularly
Run an external scan after every update to catch outdated or vulnerable software early.
Monitor continuously
Enable monitoring to get alerted the moment a new issue affects your stack.