Medium · 5.8 CVE-2022-38702 EUVD-2022-41271GHSA-9435-v4gj-93wq

WordPress WP CSV Exporter Plugin <= 2.0 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Nakashima Masahiro Product: WP CSV Exporter

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in Nakashima Masahiro WP CSV Exporter.This issue affects WP CSV Exporter: from n/a through 2.0.

Affected products

Vendor	Product	Affected	Fixed
Nakashima Masahiro	WP CSV Exporter	≤ 2.0	—

References

https://patchstack.com/database/vulnerability/wp-csv-exporter/wordpress-wp-csv-exporter-plugin-1-3-6-authenticated-csv-injection-vulnerability?_s_id=cve vdb-entry