CVE-2022-46801

CVE-2022-46801 affects the WordPress Site Reviews plugin (

CVE-2023-36527

CVE-2023-36527 affects the WordPress plugin Post to CSV by BestWebSoft. The vulnerability stems from improper neutralization of formula elements in CSV files, enabling CSV injection. Affected versions are

CVE-2023-23796

CVE-2023-23796 affects WordPress Form Builder (Create Responsive Contact Forms) plugin versions up to 1.9.9.0. Root cause: Improper neutralization of formula elements in a CSV file, enabling CSV injection. Public details in connected sources confirm the vulnerability and affected version range; r...

CVE-2022-45357

CVE-2022-45357 affects WordPress plugin 1003 Mortgage Application (versions ≤ 1.75). Root cause: improper neutralization of formula elements in CSV files, enabling CSV injection. Impact as per sources is high severity; CVSS in the entry shows 9.8 (CRITICAL) with network vectors and high confident...

CVE-2023-22719

The CVE-2023-22719 entry documents a CSV Injection vulnerability in the WordPress GiveWP plugin (affected: GiveWP <= 2.25.1). Root cause: improper neutralization of formula elements in CSV files. Impact: potential exposure of high-severity data integrity/confidentiality/availability issues per...

CVE-2022-47442

Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9...

CVE-2022-45350

Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...

CVE-2023-25983

CVE-2023-25983 affects the WordPress KB Support plugin (WPOmnia KB Support), specifically versions

CVE-2022-47442

CVE-2022-47442 affects the WordPress UsersWP plugin (versions

CVE-2022-45350

CVE-2022-45350 affects WordPress Simple History plugin (versions

CVE-2022-45350 WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...

PT-2023-14657 · WordPress · Webtoffee Wordpress Comments Import & Export

Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Comments Import & Export versions 2.3.1 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to unintended consequences when importing or...

PT-2023-14762 · WordPress · Icegram Express

Name of the Vulnerable Software and Affected Versions: Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce versions through 5.5.2 Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects Icegram Express...

PT-2023-14643 · Amr · Amr

Name of the Vulnerable Software and Affected Versions: amr users versions 4.59.4 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, affecting amr users. Recommendations: For versions 4.59.4 and earlier, update to a version that contains...

PT-2023-14588 · Solwin Infotech · User Blocker

Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Blocker versions 1.5.5 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file, which affects the User Blocker software. Recommendations: For versions 1.5.5 and...

PT-2023-14157 · Unknown · Shambix Simple Csv/Xls Exporter

Name of the Vulnerable Software and Affected Versions: Shambix Simple CSV/XLS Exporter versions 1.5.8 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to unintended consequences when importing or processing t...

Posts and Users Stats < 1.1.4 - Improper Neutralization of Formula Elements in a CSV File

Description Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3...

1003 Mortgage Application < 1.80 - Improper Neutralization of Formula Elements in a CSV File

Description Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75...