| Package | Affected versions | Patched versions |
|---|---|---|
| exports and reports | < 0.9.2 | 0.9.2 |
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free