CVE-2022-3574

The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.

Score

CVSS 3.1 9.8 Critical

Status

Modified - contact@wpscan.com

Published

2022-11-14

Last modified

2025-04-30

Weaknesses

CWE-1236

Affected products

• Wpforms Pro (Unknown)
• Wpforms Pro (Wpforms)

References

• https://wpscan.com/vulnerability/0eae5189-81af-4344-9e96-dd1f4e223d41