CVE-2026-103336: Smackcoders Inc Wp Ultimate Csv Importer

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This issue affects WP Ultimate CSV Importer: from n/a through 9.1.

Affected products

• Smackcoders Inc Wp Ultimate Csv Importer: up to and including 9.1

Published 2026-10-01. Last modified 2026-10-01.