Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-46802 EUVD-2022-49584GHSA-r4hx-4864-rmcp

WordPress Product Reviews Import Export for WooCommerce Plugin <= 1.4.8 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WebToffee Product: Product Reviews Import Export for WooCommerce Category: Web / CMS

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects Product Reviews Import Export for WooCommerce: from n/a through 1.4.8.

Affected products

VendorProductAffectedFixed
WebToffee Product Reviews Import Export for WooCommerce ≤ 1.4.8 —

References