Medium · 4.7 CVE-2023-36527 EUVD-2023-40476GHSA-m9j4-mrv9-35r6

WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection

Published Nov 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: bestwebsoft Product: Post to CSV by BestWebSoft

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0.

Affected products

Vendor	Product	Affected	Fixed
BestWebSoft	Post to CSV by BestWebSoft	≤ 1.4.0	—

References

https://patchstack.com/database/vulnerability/post-to-csv/wordpress-post-to-csv-by-bestwebsoft-plugin-1-4-0-csv-injection?_s_id=cve vdb-entry

CNA	v3.1	4.7
EUVD	v3.1	8.8
CISA-ADP	v3.1	8.8