CVE-2022-3605: Wp Csv Exporter Project Wp Csv Exporter

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leading to a CSV injection vulnerability.

Affected products

• Wp Csv Exporter Project Wp Csv Exporter: before 1.3.7 (fixed in 1.3.7)

Published 2022-12-12. Last modified 2026-06-17.