PT-2022-21343 · WordPress · Wp Csv Exporter

Asif Nawaz Minhas · Published 2022-12-05 · Updated 2025-04-23 · CVE-2022-3249

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP CSV Exporter WordPress plugin versions prior to 1.3.7

Description The issue allows high privilege users, such as admins, to perform SQL injection attacks due to improper sanitization and escaping of some parameters before using them in a SQL statement.

Recommendations For versions prior to 1.3.7, update to version 1.3.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality for high privilege users until the update is applied.

Exploit

Fix

Related Identifiers

CVE-2022-3249

Affected Products

Wp Csv Exporter

References · 7

• 🔥 https://wpscan.com/vulnerability/6503da78-a2bf-4b4c-b56d-21c8c55b076e · Exploit
• https://osv.dev/vulnerability/CVE-2022-3249 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3249 · Security Note
• https://t.me/cvenotify/39152 · Telegram Post
• https://t.me/cvenotify/119563 · Telegram Post
• https://t.me/cibsecurity/54000 · Telegram Post
• https://t.me/cvenotify/39308 · Telegram Post