6.5
CVSSv2

CVE-2022-1800

Published: 13/06/2022 Updated: 20/12/2023
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

The Export any WordPress data to XML/CSV WordPress plugin prior to 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

soflyy export any wordpress data to xml\\/csv