CVE-2022-2429

The CVE-2022-2429 entry concerns the WordPress plugin “Ultimate SMS Notifications for WooCommerce.” The vulnerability is a CSV Injection in the plugin’s Export Utility, affecting versions up to and including 1.4.1. It allows authenticated attackers (e.g., subscribers) to inject untrusted data int...