Lucene search
China National Vulnerability DatabaseCNVD-2023-74809HistoryNov 21, 2022 - 12:00 a.m.
WordPress ProfileGrid CSV Injection Vulnerability
2022-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
profilegrid
csv injection
vulnerability
change-authorization
attack
php
mysql
wordpress foundation
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerability exists in WordPress ProfileGrid 5.1.6 and earlier versions, which can be exploited by attackers to launch a change-authorization attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress profilegrid | le | 5.1.6 |
Related
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-11-17 23:15:00
cve
cve
CVE-2022-41791
2022-11-17 23:15:23
patchstack
patchstack
WordPress ProfileGrid plugin <= 5.1.6 - Auth. CSV Injection vulnerability
2022-11-17 00:00:00
nvd
nvd
CVE-2022-41791
2022-11-17 23:15:23