CVEs we hold for Smackcoders
Records whose assigning authority named Smackcoders as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-13353WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via…smackcoders WP Ultimate CSV Importer – WordPress Import &…
CVE-2026-1317WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Namesmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-9990WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusionsmackcoders WordPress Helpdesk Integration
CVE-2025-5692Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actionssmackcoders Lead Form Data Collection to CRM
CVE-2025-47690WordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerabilitySmackcoders Inc., Lead Form Data Collection to CRM
CVE-2025-31788WordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug plugin <= 1.3 - Sensitive Data Exposure…Smackcoders Inc., AIO Performance Profiler, Monitor…
CVE-2025-31775WordPress Google SEO Pressor for Rich snippets Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerabilitySmackcoders Inc., Google SEO Pressor Snippet
CVE-2025-31530WordPress Google SEO Pressor Snippet plugin <= 2.0 - Broken Access Control vulnerabilitySmackcoders Inc., Google SEO Pressor Snippet
CVE-2025-30810WordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerabilitySmackcoders Inc., Lead Form Data Collection to CRM
CVE-2025-24611WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerabilitySmackcoders Inc., WP Ultimate Exporter
CVE-2025-23423WordPress SendGrid for WordPress plugin <= 1.4 - Broken Access Control vulnerabilitySmackcoders Inc., SendGrid for WordPress
CVE-2025-2332Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injectionsmackcoders Export All Posts, Products, Orders, Refunds &…
CVE-2025-22647WordPress AIO Performance Profiler plugin <= 1.2 - Broken Access Control vulnerabilitySmackcoders Inc., AIO Performance Profiler, Monitor…
CVE-2025-2008Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Uploadsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-2007Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletionsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-14627WP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery…smackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-13606Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information…smackcoders Export All Posts, Products, Orders, Refunds &…
CVE-2025-13145WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via…smackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-12732WP Import – Ultimate CSV XML Importer for WordPress <= 7.33 - Missing Authorization to Authenticated (Author+)…smackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-10058WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletionsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2025-10057WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution…smackcoders WP Import – Ultimate CSV XML Importer for…
CVE-2025-10040WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+)…smackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2024-9364SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletionsmackcoders SendGrid for WordPress
CVE-2024-56278WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerabilitySmackcoders Inc., WP Ultimate Exporter
CVE-2024-43965WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerabilitySmackcoders SendGrid for WordPress
CVE-2024-12315Export All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected Directorysmackcoders Export All Posts, Products, Orders, Refunds &…
CVE-2023-45066WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data ExposureSmackcoders Export All Posts, Products, Orders, Refunds &…
CVE-2023-4142WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Executionsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2023-4141WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Executionsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2023-4140WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalationsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2023-4139WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listingsmackcoders WP Ultimate CSV Importer – Import CSV, XML &…
CVE-2023-2487WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data ExposureSmackcoders Export All Posts, Products, Orders, Refunds &…
32 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.