← WordPress Vulnerabilities
WordPress security by component

Really Simple CSV Importer

Really Simple CSV Importer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 9.1.

Plugin slug: really-simple-csv-importer

CVE-2026-65461: Really Simple CSV Importer: Dangerous file upload

Really Simple CSV Importer is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is n/a through 1.3.

PublishedJul 23, 2026
Known safe version1.3.1
Safe version
Jul 23, 2026 CVE-2026-65461
Really Simple CSV Importer: Dangerous file upload
Really Simple CSV Importer is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise. The published affected range is n/a through 1.3.
1.3.1
CVE9.1
NVDPending