Threats Tagged 'cve-2026-80517'
View all threats tagged with 'cve-2026-80517'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-80517'
Click on any threat for detailed analysis and mitigation recommendations
The WP Ultimate CSV Importer WordPress plugin versions before 9.2 contain a vulnerability where uploaded archive files are not properly validated for file types nor sanitized before being stored in publicly accessible locations. This flaw allows high privilege users, such as administrators, to perform Stored Cross-Site Scripting (XSS). On Multisite WordPress installations, site administrators lacking unfiltered_html capability can exploit this to run scripts in the context of users who view the malicious file, including Network Super Admins. Join the discussion | GCVE Database | 10/03/2026, 06:31:13 UTC Added: 10/03/2026, 17:21:25 UTC |
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uploaded archive nor sanitise their content before storing them in a publicly served location, allowing high privilege users such as administrators to achieve Stored Cross-Site Scripting. On Multisite installations a site Administrator does not hold the unfiltered_html capability, so this lets them run scripts in the session of users who view the file, including Network Super Admins. Join the discussion | CVE Database V5 | 10/03/2026, 06:00:25 UTC Added: 10/03/2026, 14:54:27 UTC |
Showing 1 to 2 of 2 results