CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Cvelist•added 2022/11/21 12:00 a.m.•40 views

CVE-2022-3600 Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection...

9.8AI score0.01315EPSS

SaveExploits2References1

CVE•added 2022/11/21 12:00 a.m.•87 views

CVE-2022-3600

The CVE-2022-3600 vulnerability affects the Easy Digital Downloads WordPress plugin prior to version 3.1.0.2. The issue is that the plugin does not validate data when exporting to CSV, enabling CSV/formula injection. Impact is described as potentially enabling injection in CSV files opened by use...

9.8CVSS9.6AI score0.01315EPSS

SaveExploits2References1Affected Software1

Vulnrichment•added 2022/11/21 12:00 a.m.•13 views

CVE-2022-3600 Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection

The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which could lead to CSV injection...

7AI score0.01315EPSS

SaveExploits2References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by