EUVD-2018-7445

Malware in sbrugna...

CVE-2020-9466

The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection...

CVE-2020-9466

CVE-2020-9466 affects the WordPress plugin Export Users to CSV (≤1.4.2). An attacker who can register as a subscriber can inject CSV payloads into user-details fields; when an authenticated admin exports user data to CSV and opens it, the payload can execute (e.g., redirections to malicious sites...

CVE-2020-9466: Improper Neutralization of Formula Elements in a CSV File

The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection...

PT-2020-20679

Name of the Vulnerable Software and Affected Versions Export Users to CSV plugin versions prior to 1.4.3 Description The issue allows CSV Injection. Recommendations For Export Users to CSV plugin versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue...

Export Users to CSV <= 1.4.2 - CSV Injection

An attacker can register themselves as a subscriber in a WordPress website and provide malicious payloads formula into the user account details field. When an authenticated admin uses the Export Users to CSV plugin to export the details of all the users into a CSV file and open it, the payload ge...

CVE-2018-15571: Improper Neutralization of Formula Elements in a CSV File

The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection...

PT-2018-13097

Name of the Vulnerable Software and Affected Versions Export Users to CSV plugin versions prior to 1.1.2 Description The issue allows CSV injection. Recommendations For Export Users to CSV plugin versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue...