Webtoffee WordPress Comments Import And Export vulnerabilities

2 CVEs affecting Webtoffee WordPress Comments Import And Export, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-45370, published 2023-11-07.

More from Webtoffee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11526, published 2018-06-19. High severity, CVSS 7.8. EPSS: 5.1% chance of exploitation in the next 30 days. The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.
• CVE-2022-45370, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1.