Two severe security flaws, CVE-2025-2007 and CVE-2025-2008, in the WP Ultimate CSV Importer plugin for WordPress could expose around 20,000 websites to remote code execution and file deletion attacks.
View full story…