CVE-2026-126639

The WP Ultimate CSV Importer WordPress plugin (versions before 9.2 ) and the WP Ultimate CSV Importer Pro plugin (versions before 9.0.7 ) are vulnerable to unauthenticated post data disclosure . The root cause is the lack of protection for files created by the single post export feature , which a...