Skip to content

Smackcoders vulnerabilities

Products

Newest

smackcoders wp ultimate exporter WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability CVE-2026-103348 7.2 HighOctober 5, 2026
smackcoders wp ultimate csv importer – wordpress import & export for csv, xml & excel WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'MappedFields' Parameter CVE-2026-13353 8.8 HighJuly 11, 2026
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name CVE-2026-1317 6.5 MediumFebruary 18, 2026
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypass CVE-2025-14627 6.4 MediumJanuary 1, 2026
smackcoders export all posts, products, orders, refunds & users Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure CVE-2025-13606 6.5 MediumDecember 2, 2025
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import CVE-2025-13145 7.2 HighNovember 19, 2025
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure CVE-2025-12732 4.3 MediumNovember 12, 2025
smackcoders wp import – ultimate csv xml importer for wordpress WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection CVE-2025-10057 8.8 HighSeptember 17, 2025
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2025-10058 8.1 HighSeptember 17, 2025
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure CVE-2025-10040 7.7 HighSeptember 10, 2025
smackcoders wordpress helpdesk integration WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion CVE-2025-9990 8.1 HighSeptember 5, 2025
smackcoders lead form data collection to crm Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions CVE-2025-5692 6.3 MediumJuly 2, 2025
smackcoders lead form data collection to crm WordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerability CVE-2025-47690 8.8 HighMay 23, 2025
smackcoders aio performance profiler, monitor, optimize, compress & debug WordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin <= 1.3 - Sensitive Data Exposure vulnerability CVE-2025-31788 5.3 MediumApril 1, 2025
smackcoders google seo pressor snippet WordPress Google SEO Pressor for Rich snippets Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-31775 4.3 MediumApril 1, 2025
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-2008 8.8 HighApril 1, 2025
smackcoders wp ultimate csv importer – import csv, xml & excel into wordpress Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2025-2007 8.1 HighApril 1, 2025
smackcoders google seo pressor snippet WordPress Google SEO Pressor Snippet plugin <= 2.0 - Broken Access Control vulnerability CVE-2025-31530 4.3 MediumMarch 31, 2025
smackcoders aio performance profiler, monitor, optimize, compress & debug WordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerability CVE-2025-22647 4.3 MediumMarch 27, 2025
smackcoders lead form data collection to crm WordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerability CVE-2025-30810 8.5 HighMarch 27, 2025
smackcoders export all posts, products, orders, refunds & users Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection CVE-2025-2332 9.8 CriticalMarch 27, 2025
smackcoders export all posts, products, orders, refunds & users, export all posts\, products\, orders\, refunds \& users +1 more Export All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected Directory CVE-2024-12315 7.5 HighFebruary 12, 2025
smackcoders wp ultimate exporter WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability CVE-2025-24611 4.9 MediumJanuary 24, 2025
smackcoders sendgrid for wordpress WordPress SendGrid for WordPress plugin <= 1.4 - Broken Access Control vulnerability CVE-2025-23423 4.3 MediumJanuary 16, 2025
smackcoders wp ultimate exporter WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability CVE-2024-56278 Public exploit 9.1 CriticalJanuary 7, 2025
smackcoders sendgrid, sendgrid for wordpress +1 more SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion CVE-2024-9364 4.3 MediumOctober 18, 2024
smackcoders sendgrid, sendgrid for wordpress +1 more WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability CVE-2024-43965 Public exploit 8.2 HighAugust 29, 2024
smackcoders export all posts, products, orders, refunds & users, export all posts\, products\, orders\, refunds \& users +1 more WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure CVE-2023-2487 5.9 MediumDecember 21, 2023
smackcoders export all posts, products, orders, refunds & users, export all posts\, products\, orders\, refunds \& users +1 more WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure CVE-2023-45066 5.9 MediumNovember 30, 2023
smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv WP Ultimate CSV Importer Plugin cross-site request forgery CVE-2015-10125 4.3 MediumOctober 5, 2023
smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 more WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution CVE-2023-4142 8.0 HighAugust 4, 2023
smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 more WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution CVE-2023-4141 8.0 HighAugust 4, 2023
smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 more WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing CVE-2023-4139 7.5 HighAugust 4, 2023
smackcoders wp ultimate csv importer, wp ultimate csv importer – import csv, xml & excel into wordpress +1 more WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation CVE-2023-4140 6.6 MediumAugust 4, 2023
smackcoders visual email designer for woocommerce Visual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLi CVE-2022-3860 8.8 HighJanuary 2, 2023
unknown import all xml, csv & txt into wordpress, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 more Import all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation CVE-2022-3244 4.2 MediumOctober 17, 2022
unknown import all xml, csv & txt into wordpress, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 more Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi CVE-2022-3243 7.2 HighOctober 17, 2022
unknown import export all wordpress images, users & post types, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 more WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRF CVE-2022-1977 7.2 HighJune 27, 2022
unknown easy drag and drop all import : wp ultimate csv importer, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 more WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting CVE-2022-0360 4.8 MediumFebruary 28, 2022
smackcoders ultimate exporter The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the... CVE-2016-11000 9.8 CriticalSeptember 20, 2019
smackcoders echo sign The echosign plugin before 1.2 for WordPress has XSS via the templates/add_templates.php id... CVE-2016-10985 6.1 MediumSeptember 17, 2019
smackcoders echo sign The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter. CVE-2016-10984 6.1 MediumSeptember 17, 2019
smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF. CVE-2018-20967 8.8 HighAugust 14, 2019
smackcoders ultimate exporter The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF. CVE-2018-20968 8.8 HighAugust 14, 2019
smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS. CVE-2015-9306 6.1 MediumAugust 12, 2019
smackcoders wp ultimate email marketer plugin The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly... CVE-2013-3264 6.4 MediumNovember 5, 2013
smackcoders wp ultimate email marketer plugin Multiple cross-site scripting (XSS) vulnerabilities in the WP Ultimate Email Marketer plugin 1.1... CVE-2013-3263 4.3 MediumNovember 5, 2013