cleantalk
Vulnerabilities and Security Researches

Import CSV or XML Datafeed With Ease, a7b79211664ac6b46269ced6e6e0d3bab510a026

Published on
Jan 12, 2022
Research Description
WP Ultimate CSV Importer – WordPress Import &amp; Export for CSV, XML &amp; Excel [wp-ultimate-csv-importer] < 6.4.1 WordPress WP Ultimate CSV Importer plugin <= 6.4 - Arbitrary Media File Deletion vulnerability Arbitrary Media File Deletion vulnerability (restricted to the uploads folder of the current year/month) discovered in WordPress WP Ultimate CSV Importer plugin (versions <= 6.4).
Affected versions
max 6.4.1.
Status
vulnerable