Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Smackcoders vulnerabilities

23 published CVEs name Smackcoders among the affected products.

All 23 in the listAtom feed of new CVEs
Published CVEs
23
Last 12 months
6
Critical
1
Known exploited
0

Critical 1High 13Medium 9Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20236
  2. 20242
  3. 202512
  4. 20263

Newest CVEs

  • CVE-2026-13353

    WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'MappedFields' Parameter

    smackcoders · WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel

    High8.8
  • CVE-2026-1317

    WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name

    smackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

    Medium6.5
  • CVE-2025-14627

    WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink Bypass

    smackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

    Medium6.4
  • CVE-2025-13606

    Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information Exposure

    smackcoders · Export All Posts, Products, Orders, Refunds & Users

    Medium6.5
  • CVE-2025-13145

    WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import

    smackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

    High7.2
  • CVE-2025-12732

    WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+) Sensitive Information Exposure

    smackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

    Medium4.3
  • CVE-2025-10057

    WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection

    smackcoders · WP Import – Ultimate CSV XML Importer for WordPress

    High8.8
  • CVE-2025-10058

    WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion

    smackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

    High8.1
  • CVE-2025-10040

    WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure

    smackcoders · WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

    High7.7
  • CVE-2025-9990

    WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion

    smackcoders · WordPress Helpdesk Integration

    High8.1

Products with the most CVEs

  1. WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress12
  2. Export All Posts, Products, Orders, Refunds & Users5
  3. SendGrid for WordPress2
  4. Lead Form Data Collection to CRM1
  5. WP Import – Ultimate CSV XML Importer for WordPress1
  6. WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel1
  7. WordPress Helpdesk Integration1

Most common weaknesses

  1. CWE-200 Exposure of sensitive information4
  2. CWE-94 Code injection4
  3. CWE-862 Missing authorization3
  4. CWE-502 Deserialization of untrusted data2
  5. CWE-89 SQL injection2
  6. CWE-23 1
  7. CWE-269 Improper privilege management1
  8. CWE-352 Cross-site request forgery (CSRF)1
  9. CWE-434 Unrestricted file upload1
  10. CWE-73 External control of file name or path1