FE CSV Import & Export Pro v1.0.3 Released | Security fixes for auth bypass and injection vectors

FE CSV Import & Export Pro 1.0.3 is now available. This is a security-focused release. Highlights:

Security Fixes:

• Closed an execution password and re-authentication bypass on import and export — continuation and auxiliary requests now require a server-side grant bound to the user and session, and re-auth is enforced independently of the execution password setting
• Prevented PHP object injection in ACF taxonomy meta extraction — class instantiation is disabled when unserializing stored values
• Neutralized spreadsheet formula injection in Direct SQL export headers — values starting with =, +, -, @, tab, or carriage return are prefixed with a single quote

Bug Fixes:

• Fixed imports failing on every other run when password re-authentication is required

Product Page: FE CSV Import & Export Pro