CVE-2023-25983

CVE-2023-25983: WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection

Vendor Wpomnia

Product KB Support

Weakness CWE-1236

Published November 7, 2023

Last update April 29, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84.

Key dates

02Disclosure timeline

November 7, 2023 CVE published

April 29, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-25983 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1236.html AskarLabs — CWE-1236 write-up Improper Neutralization of Formula Elements in a CSV File

Related vulnerabilities

04Related CVE

CVE-2025-11254 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection CVE-2022-46804 WordPress Export Users Data Distinct Plugin <= 1.3 is vulnerable to CSV Injection CVE-2022-45357 WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection CVE-2023-5527 Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection CVE-2024-3214 Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection