CVE-2022-1800

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability...

CVE-2022-1800 Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability...

CVE-2022-1800

CVE-2022-1800 affects the WordPress plugin “Export any WordPress data to XML/CSV” versions prior to 1.3.5. The root cause is unsanitized use of the POST parameter cpt in a database query during export, which leads to SQL injection. Multiple sources (Red Hat, CNVD, CVE/NVD listings, WPVulnDB, Patc...