| Package | Affected versions | Patched versions |
|---|---|---|
| contact-form-7-to-database-extension | ≤ 2.10.32 |
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free