TI-2020-18984 CVE-2020-36849 · GHSA-p27j-qf57-7cm7AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File UploadPriority HIGH 82The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to,…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07992 · Published 2025-07-12 · No fix listed CWE-434