Threat database

CVE-2026-45440 is a high severity SQL Injection vulnerability affecting WP Ultimate CSV Importer versions up to 9.2. It allows an authenticated administrator to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. This vulnerability can lead to data confidentiality breaches and partial denial of service. No specific affected versions beyond "<= 9.2" are provided, and no patch or remediation details are available in the input data.

CVE-2026-103348 is a high severity vulnerability in Smackcoders Inc. WP Ultimate Exporter plugin that allows deserialization of untrusted data leading to object injection. This affects versions from initial release up to but not including 3.1. The vulnerability can result in complete compromise of confidentiality, integrity, and availability of the affected system. No known exploits are reported in the wild, and no patch information is provided in the source data.

CVE-2026-103336 is a vulnerability in Smackcoders Inc. WP Ultimate CSV Importer that allows insertion of sensitive information into sent data. This affects versions from the initial release up to but not including 9.2. The vulnerability can lead to unauthorized retrieval of embedded sensitive data. It has a medium severity rating with a CVSS score of 5.3.

Insertion of Sensitive Information into Log File vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Retrieve Embedded Sensitive Data.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through <= 1.3.

Cross-Site Request Forgery (CSRF) vulnerability in Smackcoders Inc., Google SEO Pressor Snippet google-seo-author-snippets allows Cross Site Request Forgery.This issue affects Google SEO Pressor Snippet: from n/a through <= 2.0.

Missing Authorization vulnerability in Smackcoders Inc., Google SEO Pressor Snippet google-seo-author-snippets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google SEO Pressor Snippet: from n/a through <= 2.0.

Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through <= 1.2.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allows Blind SQL Injection.This issue affects Lead Form Data Collection to CRM: from n/a through <= 3.0.1.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through <= 2.9.

Missing Authorization vulnerability in Smackcoders Inc., SendGrid for WordPress wp-sendgrid-mailer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SendGrid for WordPress: from n/a through <= 1.4.

Improper Control of Generation of Code ('Code Injection') vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through <= 2.9.1.