CVE-2015-10125

A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.7.3 is able to address this issue. The identifier of the patch is 13c30af721d3f989caac72dd0f56cf0dc40fad7e. It is recommended to upgrade the affected component. The identifier VDB-241317 was assigned to this vulnerability.

• CWE-352

• https://github.com/wp-plugins/wp-ultimate-csv-importer/commit/13c30af721d3f989caac72dd0f56cf0dc40fad7ePatch
• https://github.com/wp-plugins/wp-ultimate-csv-importer/releases/tag/3.7.3Release Notes
• https://vuldb.com/?ctiid.241317Third Party Advisory
• https://vuldb.com/?id.241317Third Party Advisory
• https://github.com/wp-plugins/wp-ultimate-csv-importer/commit/13c30af721d3f989caac72dd0f56cf0dc40fad7ePatch
• https://github.com/wp-plugins/wp-ultimate-csv-importer/releases/tag/3.7.3Release Notes
• https://vuldb.com/?ctiid.241317Third Party Advisory
• https://vuldb.com/?id.241317Third Party Advisory

Published

Oct 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1012Wireless keys are stored in plain text on version 5 of the H…
• CVE-2015-10120A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2015-10121A vulnerability has been found in Beeliked Microsite Plugin …6.1
• CVE-2015-10122A vulnerability was found in wp-donate Plugin up to 1.4 on W…9.8
• CVE-2015-10123An unautheticated remote attacker could send specifically cr…8.8
• CVE-2015-10124A vulnerability was found in Most Popular Posts Widget Plugi…9.8
• CVE-2015-10126A vulnerability classified as critical was found in Easy2Map…9.8
• CVE-2015-10127A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 …6.1
• CVE-2015-10128A vulnerability was found in rt-prettyphoto Plugin up to 1.2…6.1
• CVE-2015-10129A vulnerability was found in planet-freo up to 20150116 and …5.9
• CVE-2015-1013OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not …
• CVE-2015-10130The Team Circle Image Slider With Lightbox plugin for WordPr…4.3