TI-2025-05496 CVE-2025-6086 · GHSA-p9r6-7869-p4q8
CSV Me <= 2.0 - Authenticated (Administrator+) Arbitrary File Upload
Priority LOW 35
The CSV Me plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'csv_me_options_page' function in all versions up to, and including, 2.0.