Lucene search
Francesco CarlucciPATCHSTACK:4776A6BF8DA94A8D940F7555D28124D0HistoryOct 03, 2022 - 12:00 a.m.
WordPress Post to CSV by BestWebSoft plugin <= 1.4.0 - Authenticated CSV Injection vulnerability
2022-10-0300:00:00
Francesco Carlucci
patchstack.com
12
wordpress post to csv
bestwebsoft plugin
csv injection
authenticated
vulnerability
francesco carlucci
deactivation
closure
EPSS
0.003
Percentile
68.8%
Authenticated CSV Injection vulnerability discovered by Francesco Carlucci in WordPress Post to CSV by BestWebSoft plugin (versions <= 1.4.0).
Solution
Deactivate and delete. This plugin has been closed as of September 28, 2022 and is not available for download. This closure is temporary, pending a full review.
Related
prion
prion
Design/Logic Flaw
2022-10-25 17:15:00
cve
cve
CVE-2022-3393
2022-10-25 17:15:57
wpvulndb
wpvulndb
Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
2022-10-03 00:00:00
wpexploit
wpexploit
Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
2022-10-03 00:00:00
nvd
nvd
CVE-2022-3393
2022-10-25 17:15:57
cvelist
cvelist
CVE-2022-3393 Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
2022-10-25 00:00:00