CVE-2026-45440: Smackcoders Inc Wp Ultimate Csv Importer

High severity, CVSS 7.6.

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

Affected products

• Smackcoders Inc Wp Ultimate Csv Importer: up to and including 9.2

Published 2026-10-10. Last modified 2026-10-10.