9.8
Critical
CVE-2022-3574 The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which…
Description
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WPForms Pro 1.7 | earliest → < 1.7.7 | 1.7.7 |