CVE-2022-3249: Wp Csv Exporter Project Wp Csv Exporter

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using them in a SQL statement, allowing high privilege users such as admin to perform SQL injection attacks

Affected products

• Wp Csv Exporter Project Wp Csv Exporter: before 1.3.7 (fixed in 1.3.7)

Published 2022-12-05. Last modified 2026-06-17.