Description
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WPForms Pro | 1.7.7 – < 1.7.7 | 1.7.7 |
Critical · 9.8
CVE-2022-3574
EUVD-2022-42938GHSA-6mxj-jjjj-8mpv
WPForms Pro < 1.7.7 - CSV Injection
Published Nov 14, 2022 · Updated Apr 30, 2025 · Assigned by WPScan