Medium · 6.1 CVE-2022-45370 EUVD-2022-48267GHSA-2c28-wpp9-3fwq

WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WebToffee Product: WordPress Comments Import & Export Category: Web / CMS

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1.

Affected products

Vendor	Product	Affected	Fixed
WebToffee	WordPress Comments Import & Export	≤ 2.3.1	—

References

https://patchstack.com/database/vulnerability/comments-import-export-woocommerce/wordpress-wordpress-comments-import-export-plugin-2-3-1-csv-injection?_s_id=cve vdb-entry

CNA	v3.1	6.1
EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8