← Back

Wp Csv Exporter

wp_csv_exporter

Vendor: Wp Csv Exporter Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-3605
1Wp Csv Exporter Project
1Wp Csv Exporter
Jun 17, 2026
Dec 12, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.
CVE-2022-3249
1Wp Csv Exporter Project
1Wp Csv Exporter
Jun 17, 2026
Dec 5, 2022
N/A· v4
7.2 HIGH· v3
N/A· v2
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statement, allowing high privilege users such as admin to perform SQL injection attacks