7.8
High
CVE-2022-3605 The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV,…
Description
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP CSV Exporter 1.3 | earliest → < 1.3.7 | 1.3.7 |