1964 matches found
CVE-2022-3605 WP CSV Exporter < 1.3.7 - CSV Injection
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability...
CVE-2022-3605
The CVE-2022-3605 entry concerns the WP CSV Exporter WordPress plugin, affected versions prior to 1.3.7. The root cause is improper escaping of fields during CSV export, resulting in a CSV injection vulnerability. Practical impact is that exporting data to CSV may allow crafted inputs to trigger ...
CVE-2022-3605 WP CSV Exporter < 1.3.7 - CSV Injection
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability...
PT-2022-23142 · WordPress · Wp Csv Exporter
Name of the Vulnerable Software and Affected Versions: WP CSV Exporter WordPress plugin versions prior to 1.3.7 Description: The issue arises from the WP CSV Exporter WordPress plugin's failure to properly escape fields when exporting data as CSV, leading to a CSV injection vulnerability...
WordPress Export customers list csv for WooCommerce plugin CSV Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Export customers...
WordPress Appointment Hour Booking plugin suffers from CSV injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...
CVE-2022-4034
The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...
Input validation
The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...
CVE-2022-4034
The WordPress Appointment Hour Booking Plugin is affected by a CSV Injection vulnerability in versions up to and including 1.3.72. Unauthenticated attackers can embed untrusted input into booking content, which may be exported as a CSV file and opened on a vulnerable system, potentially resulting...
CVE-2022-4034 Appointment Hour Booking <= 1.3.72 - CSV Injection
The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...
CVE-2022-4034 Appointment Hour Booking <= 1.3.72 - CSV Injection
The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...
WordPress plugin Appointment Hour Booking 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...
Appointment Hour Booking < 1.3.73 - CSV Injection
The plugin does not validate data when output it back in a CSV file, which could lead to CSV injection...
CVE-2022-3603
The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection...
Design/Logic Flaw
The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection...
CVE-2022-3603
The CVE-2022-3603 issue affects the WordPress plugin “Export customers list csv for WooCommerce” (and related WordPress export functionality). The vulnerability is due to lack of data validation when outputting data back into a CSV file, enabling CSV injection. Affected versions are prior to 2.0....
CVE-2022-3603 Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection...
CVE-2022-3603 Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection...
WordPress Contact Form 7 Database Addon plugin CSV Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...
WordPress Easy Digital Downloads plugin CSV Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...