Vulnerabilities > Wpforms > Wpforms PRO

DATE CVE VULNERABILITY TITLE RISK
2022-11-14 CVE-2022-3574 Improper Neutralization of Formula Elements in a CSV File vulnerability in Wpforms PRO
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
network
low complexity
wpforms CWE-1236
critical
9.8