WordPress Plugin Vulnerabilities
WooCommerce - Store Exporter < 2.4 - CSV Injection
Description
A CSV Injection vulnerability was discovered in WooCommerce - Store Exporter v 2.3.1. It allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible command/code execution.
Affects Plugins
Fixed in 2.4 References
Miscellaneous
Original Researcher
Vishnupriya Ilango of Fortinet's FortiGuard Labs
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-01-09 (about 6 years ago)
Added
2020-01-09 (about 6 years ago)
Last Updated
2020-01-10 (about 6 years ago)
WPScan 