CVE-2026-80488

The WP Ultimate CSV Importer WordPress plugin before version 9.0 is vulnerable to SQL injection through improper sanitisation and escaping of imported field values before use in a SQL statement. Per the CVE listing, the specific vector involves AIOSEO Import Fields . The vulnerability is exploita...