CVE-2022-3574

CVE-2022-3574: WPForms Pro < 1.7.7 - CSV Injection

Vendor Unknown
Product WPForms Pro
Weakness CWE-1236
Published November 14, 2022
Last update April 30, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.

Key dates

02Disclosure timeline

November 14, 2022 CVE published
April 30, 2025 Record updated