CVE-2026-125912 | WP Ultimate CSV Importer Plugin up to 9.1 on WordPress Remote Media Import code injection

November 13, 2026 Yanac

A vulnerability described as problematic has been identified in WP Ultimate CSV Importer Plugin up to 9.1 on WordPress. This issue affects some unknown processing of the component Remote Media Import. Such manipulation leads to code injection.

This vulnerability is documented as CVE-2026-125912. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More