CVE-2026-126640 | WP Ultimate CSV Importer Plugin up to 9.2 on WordPress sql injection

A vulnerability identified as problematic has been detected in WP Ultimate CSV Importer Plugin up to 9.2 on WordPress. The impacted element is an unknown function. The manipulation leads to sql injection.

This vulnerability is documented as CVE-2026-126640. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More