CVE-2026-65461

Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.

Score

CVSS 3.1 9.1 Critical

Status

Deferred - audit@patchstack.com

Published

2026-07-23

Last modified

2026-10-24

Weaknesses

CWE-434

Affected products

• Really Simple Csv Importer (Web)

References

• https://patchstack.com/database/wordpress/plugin/really-simple-csv-importer/vulnerability/wordpress-really-simple-csv-i…