plugin

Wp Csv Exporter Vulnerabilities

2 known security issues reported for the Wp Csv Exporter WordPress plugin. Most recent disclosed Nov 29, 2022.

2 high

Running Wp Csv Exporter on your site? Check whether your installed version is affected.

Scan your site free

WP CSV Exporter <= 1.3.6 - CSV Injection

high

The WP CSV Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.6. This allows administrator-level attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable c...

CVSS:
7.7
Affected:
up to 1.3.6
Fixed in:
1.3.7
Disclosed:
Nov 29, 2022

CVE-2022-3605 on NVD →

WP CSV Exporter <= 1.3.6 - Authenticated (Admin+) SQL Injection

high

The WP CSV Exporter plugin for WordPress is vulnerable to generic SQL Injection via the $query_select value in versions up to, and including, 1.3.6 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for administrator-level a...

CVSS:
7.2
Affected:
up to 1.3.6
Fixed in:
1.3.7
Disclosed:
Nov 9, 2022

CVE-2022-3249 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database