7.2
High
CVE-2022-3249 The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using…
Description
The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statement, allowing high privilege users such as admin to perform SQL injection attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP CSV Exporter 1.3 | earliest → < 1.3.7 | 1.3.7 |