CVE-2022-1800CWE-89

Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01281 · 69.8th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-06-13T12:43Z
EPSS history
Timeline
  • 13 JUN 12:43Z
    Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection
    cvelistv5