← Back

Aleapp

aleapp

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Csv Mass Importer
csv_mass_importer
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-4190
1Aleapp
1Csv Mass Importer
Jun 17, 2026
May 17, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (f...Show more
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)Show less