Skip to content
OpenAdvisories
Low · 3.1 CVE-2022-47163 EUVD-2022-49938GHSA-c2xx-vqvr-jxwv

WordPress WP CSV to Database Plugin <= 2.6 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Tips and Tricks HQ, josh401 Product: WP CSV to Database – Insert CSV file content into WordPress database Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file content into WordPress plugin <= 2.6 versions.

Affected products

VendorProductAffectedFixed
Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file content into WordPress database ≤ 2.6 —

References