Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-3603 EUVD-2022-42966GHSA-gg36-2fj2-24h8

Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection

Published Nov 28, 2022 · Updated Apr 25, 2025 · Assigned by WPScan

Category: Web / CMS

Description

The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection.

Affected products

VendorProductAffectedFixed
— Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list < 2.0.69 2.0.69

References