Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-103336 EUVD-2026-90787GHSA-6467-f79m-v7rq

WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability

Published Oct 1, 2026 · Updated Oct 5, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1.

Affected products

VendorProductAffectedFixed
Smackcoders WP Ultimate CSV Importer ≤ 9.1 —

References