Jaan Buerms

**Name of the Vulnerable Software and Affected Versions** WP Ultimate CSV Importer versions prior to 9.0 **Description** Insufficient sanitization and escaping of imported field values before their use in a SQL statement allows high privilege users, such as administrators, to perform SQL injection attacks. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database. **Recommendations** Update to version 9.0 or later.