Log in Start free

Smackcoders

Products

ProductCVEsExploitedLatest
WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress12–Feb 18, 2026
Export All Posts, Products, Orders, Refunds & Users5–Dec 2, 2025
SendGrid for WordPress2–Oct 18, 2024
WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel1–Jul 11, 2026
WordPress Helpdesk Integration1–Sep 5, 2025
Lead Form Data Collection to CRM1–Jul 2, 2025
WP Import – Ultimate CSV XML Importer for WordPress1–Sep 17, 2025

Exploited and recent CVEs

  • CVE-2026-13353 High 8.8 WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'MappedFields' Parameter 1.1%
  • CVE-2026-1317 Medium 6.5 WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name 0.3%
  • CVE-2025-14627 Medium 6.4 WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypass 0.3%
  • CVE-2025-13606 Medium 6.5 Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure 0.2%
  • CVE-2025-13145 High 7.2 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import 0.6%
  • CVE-2025-12732 Medium 4.3 WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure 0.3%
  • CVE-2025-10057 High 8.8 WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection 0.7%
  • CVE-2025-10058 High 8.1 WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion 0.6%
  • CVE-2025-10040 High 7.7 WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure 0.3%
  • CVE-2025-9990 High 8.1 WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion 1.3%
  • CVE-2025-5692 Medium 6.3 Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions 0.3%
  • CVE-2025-2008 High 8.8 Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload 1.2%
  • CVE-2025-2007 High 8.1 Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion 1.2%
  • CVE-2025-2332 Critical 9.8 Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection 0.8%
  • CVE-2024-12315 High 7.5 Export All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected Directory 0.5%
  • CVE-2024-9364 Medium 4.3 SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion 0.4%
  • CVE-2024-43965 High 8.2 WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability 2.0%
  • CVE-2023-2487 Medium 5.9 WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2023-45066 Medium 5.9 WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2023-4142 High 8.0 WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution 1.6%
  • CVE-2023-4141 High 8.0 WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution 1.6%
  • CVE-2023-4139 High 7.5 WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing 0.7%
  • CVE-2023-4140 Medium 6.6 WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation 0.8%