Aller au contenu
Se connecter
7.2 Élevée

CVE-2022-3249 The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using…

Description

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statement, allowing high privilege users such as admin to perform SQL injection attacks

Produits et versions touchés

Produit Versions touchées Corrigé en
WP CSV Exporter 1.3 premières → < 1.3.7 1.3.7

Autres CVE de WP CSV Exporter

Les 2 CVE de WP CSV Exporter →
CVE-2022-3605 The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV,… 7.8 Élevée
Suivre cette CVE