← Back

Csv Mass Importer

csv_mass_importer

Vendor: Aleapp • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-4190
1Aleapp
1Csv Mass Importer
Jun 17, 2026
May 17, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (f...Show more
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)Show less