smackcoders

Records49All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

smackcoders records in CISA KEV

No smackcoders vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Import All Pages, Post Types, Products, Orders, And Users As Xml & Csv 7 records HIGH Wp Ultimate Csv Importer 4 records MEDIUM Export All Posts, Products, Orders, Refunds & Users 3 records LOW Echo Sign 2 records LOW Sendgrid 2 records MEDIUM Ultimate Exporter 2 records MEDIUM Wp Ultimate Email Marketer Plugin 2 records LOW Lead Form Data Collection To Crm 1 record LOW

Records

4 records in Wp Ultimate Csv Importer · all components

TI-2023-03834 CVE-2023-4142 · GHSA-7j49-h82v-67c9

WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution

MEDIUM 43

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 7.9.8 via the '->cus1' parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01555 Published 2023-08-04 No fix listed CWE-94

TI-2023-03833 CVE-2023-4141 · GHSA-w69j-4793-jpx4

WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution

MEDIUM 43

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 7.9.8 via the '->cus2' parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01555 Published 2023-08-04 No fix listed CWE-94

TI-2023-03832 CVE-2023-4140 · GHSA-w8cv-px37-3m49

WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation

MEDIUM 41

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.9.8 due to insufficient restriction on the 'get_header_values' function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00788 Published 2023-08-04 No fix listed CWE-269

TI-2023-03831 CVE-2023-4139 · GHSA-qmfx-q55g-7jjv

WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing

MEDIUM 40

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing due to missing restriction in export folder indexing in versions up to, and including, 7.9.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00682 Published 2023-08-04 No fix listed CWE-200

Open these records in search →

Critical	4
High	25
Medium	20
Low	0
No CVSS	0