← All advisories

Critical severity9.8NVD Advisory· Published Nov 14, 2022· Updated Jun 17, 2026

CVE-2022-3574

CVE-2022-3574

Description

The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Wpformscpe-rescue
Package: https://wordpress.org/plugins/wpforms
WordPress/WPForms Prollm-fuzzy
Range: <1.7.7

Patches

Vulnerability mechanics

References

1

wpscan.com/vulnerability/0eae5189-81af-4344-9e96-dd1f4e223d41nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.