CVE-2022-3603: Piwebsolution Export Customers List Csv For Woocommerce

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2.0.69 does not validate data when outputting it back in a CSV file, which could lead to CSV injection.

Affected products

  • Piwebsolution Export Customers List Csv For Woocommerce: before 2.0.69 (fixed in 2.0.69)

Published 2022-11-28. Last modified 2026-06-17.