https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:02:41.193442+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-126640 CVE-2026-126640 — WP Ultimate CSV Importer < 9.3 - Admin+ SQLi via LifterLMS Import 2026-11-15T07:02:41.194226+00:00

Affected: Unknown WP Ultimate CSV Importer

The WP Ultimate CSV Importer WordPress plugin before 9.3 does not escape values from imported files before using them in SQL queries when importing LifterLMS content, allowing high privilege users such as admin, including the administrator of a single site on a multisite network, to perform SQL injection attacks.