Filtered by vendor Wp Csv Exporter Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-3605 1 Wp Csv Exporter Project 1 Wp Csv Exporter 2024-08-03 7.8 High
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.
CVE-2022-3249 1 Wp Csv Exporter Project 1 Wp Csv Exporter 2024-08-03 7.2 High
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statement, allowing high privilege users such as admin to perform SQL injection attacks