Critical · 9.1 CVE-2024-38734 EUVD-2024-37582GHSA-mc99-vhff-24qr

WordPress Import Spreadsheets from Microsoft Excel plugin <= 10.1.4 - Arbitrary File Upload vulnerability

Published Jul 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: SpreadsheetConverter Product: Import Spreadsheets from Microsoft Excel

Description

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4.

Affected products

Vendor	Product	Affected	Fixed
SpreadsheetConverter	Import Spreadsheets from Microsoft Excel	≤ 10.1.4	—

References

https://patchstack.com/database/vulnerability/import-spreadsheets-from-microsoft-excel/wordpress-import-spreadsheets-from-microsoft-excel-plugin-10-1-4-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry