Threats tagged 'ghsa-g3hh-4c53-rw8m'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-126639The WP Ultimate CSV Importer WordPress plugin before 9.2, WP Ultimate CSV Importer Pro WordPress plugin before 9.0.7 High2026-11-14GCVE DatabaseCVE-2026-126639 The WP Ultimate CSV Importer and WP Ultimate CSV Importer Pro WordPress plugins before versions 9.2 and 9.0.7 respectively, expose exported post files via a publicly accessible location with predictable filenames. This allows unauthenticated attackers to download content and custom fields of any exported post, including non-public content. Report on CVE-2026-126639 Vulnerability #ghsa-g3hh-4c53-rw8m	GCVE Database	2026-11-14

Page 1 of 1