WordPress Plugin Vulnerabilities
Export Users to CSV <= 1.4.2 - CSV Injection
Description
An attacker can register themselves as a subscriber in a WordPress website and provide malicious payloads (formula) into the user account details field. When an authenticated admin uses the Export Users to CSV plugin to export the details of all the users into a CSV file and open it, the payload gets executed and can lead to unintended actions such as redirections to unknown/harmful websites.
February 08, 2020 - Report submitted to the developer by researcher
February 26th, 2020 - No update from developer after multiple attempts. Escalated to WP Plugin Team. Release of the advisory.
Proof of Concept
Affects Plugins
No known fix References
Miscellaneous
Original Researcher
Jinson Varghese Behanan
Submitter
Jinson Varghese Behanan
Submitter website
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-02-26 (about 6 years ago)
Added
2020-02-26 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 