CVE-2026-80488

UNKNOWN 0.0

WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.

Vendor	unknown
Product	wp ultimate csv importer
Published	Aug 29, 2026

Stay Ahead of the Next One

Get instant alerts for unknown wp ultimate csv importer

Be the first to know when new unknown vulnerabilities affecting unknown wp ultimate csv importer are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / WP Ultimate CSV Importer

0 < 9.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/94ed94c8-88e9-4fe8-ad83-cacd4f39dd20/

Credits

Jaan Buerms WPScan