WordPress security by component

Ultimate WooCommerce CSV Importer

Plugin description

Ultimate WooCommerce CSV Importer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 27, 2022; the highest CVE/CNA score is 6.1.

Plugin slug: ultimate-woocommerce-csv-importer

Latest vulnerability

CVE-2022-1470: Ultimate WooCommerce CSV Importer: Cross-site scripting

Ultimate WooCommerce CSV Importer is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJun 27, 2022

Safe version guidanceSee mitigation notes

		Safe version
Jun 27, 2022	CVE-2022-1470 Ultimate WooCommerce CSV Importer: Cross-site scripting Ultimate WooCommerce CSV Importer is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1