CVE-2022-3393: Bestwebsoft Post To Csv

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection

Affected products

• Bestwebsoft Post To Csv: up to and including 1.4.0

Published 2022-10-25. Last modified 2026-06-17.