plugin

Csv To Sorttable Vulnerabilities

2 known security issues reported for the Csv To Sorttable WordPress plugin. Most recent disclosed Nov 18, 2025.

1 high 1 medium

Running Csv To Sorttable on your site? Check whether your installed version is affected.

Scan your site free

CSV to SortTable <= 4.2 - Authenticated (Contributor+) Local File Inclusion

high

The CSV to SortTable plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2 via the 'csv' shortcode. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be...

CVSS:
8.1
Affected:
up to 4.2
Fix:
No patched version reported
Disclosed:
Nov 18, 2025

CVE-2025-13070 on NVD →

CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

medium

The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level acce...

CVSS:
6.4
Affected:
up to 4.2
Fix:
No patched version reported
Disclosed:
Nov 17, 2025

CVE-2025-12823 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database