WP Ultimate CSV Importer

7.28 Authenticated (Subscriber+) Remote Code Execution via Code Injection vulnerability 7.20-7.28

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability <= 7.27

Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure vulnerability <= 7.27

Authenticated (Subscriber+) Arbitrary File Upload vulnerability <= 7.19

Authenticated (Subscriber+) Arbitrary File Deletion vulnerability <= 7.19