critical9.8
CVE-2022-3574
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
Impact
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpforms | Wpforms Pro | before 1.7.7 |