CVE-2026-80488
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 29, 2026
Vendor
unknown
Description
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.