Threats tagged 'ghsa-2mxc-w25w-664h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-126640The WP Ultimate CSV Importer WordPress plugin before 9.3 does not escape values from imported files before using them High2026-11-14GCVE DatabaseCVE-2026-126640 The WP Ultimate CSV Importer WordPress plugin versions before 9.3 contain a vulnerability where values from imported files are not escaped before use in SQL queries when importing LifterLMS content. This flaw allows high privilege users, such as administrators on single or multisite WordPress installations, to perform SQL injection attacks. Report on CVE-2026-126640 Vulnerability #ghsa-2mxc-w25w-664h	GCVE Database	2026-11-14

Page 1 of 1