Medium · 6.1 CVE-2022-45357 EUVD-2022-48254GHSA-qhv9-5qrv-2r67

WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Lenderd Product: 1003 Mortgage Application

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from n/a through 1.75.

Affected products

Vendor	Product	Affected	Fixed
Lenderd	1003 Mortgage Application	≤ 1.75	—

References

https://patchstack.com/database/vulnerability/1003-mortgage-application/wordpress-1003-mortgage-application-plugin-1-73-csv-injection?_s_id=cve vdb-entry

CNA	v3.1	6.1
EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8