Skip to main content

Import And Export Users And Customers CVE-2022-3558

HIGH
Improper Neutralization of Formula Elements in a CSV File (CWE-1236)
2022-11-07 contact@wpscan.com
WordPress Information Disclosure Import And Export Users And Customers Wordpress Plugin Codection
8.0
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.0 HIGH
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 07, 2022 - 10:15 nvd
HIGH 8.0

DescriptionNVD

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files.

AnalysisAI

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-1236. The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files. Affected products include: Codection Import And Export Users And Customers. Version information: before 1.20.5.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Import And Export Users And Customers

View all
CVE-2026-16534 CRITICAL POC
9.1 Aug 03

Privilege escalation in the "Import and export users and customers" WordPress plugin before 2.4.2 lets a user who holds

CVE-2020-22277 HIGH POC
8.0 Nov 04

Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.

CVE-2025-15673 MEDIUM POC
4.9 Aug 03

Path traversal in the 'Import and export users and customers' WordPress plugin (versions before 2.4.3) enables high-priv
CVE-2022-1255 MEDIUM POC
4.8 May 02

The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV da
CVE-2026-3629 HIGH
8.1 Mar 21

The Import and export users and customers plugin for WordPress contains a privilege escalation vulnerability that allows
CVE-2023-6583 MEDIUM
6.6 Jan 11

The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up t
CVE-2024-22151 MEDIUM
5.3 Jun 08

Missing Authorization vulnerability in Codection Import and export users and customers.24.6. Rated medium severity (CVSS
CVE-2023-6624 MEDIUM
4.9 Jan 11

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug
CVE-2026-15026 MEDIUM
4.3 Jul 10

Sensitive information exposure in the Import and Export Users and Customers WordPress plugin (all versions ≤ 2.4.0) allo

Same weakness CWE-1236 – Improper Neutralization of Formula Elements in a CSV File

View all
CVE-2019-14749 HIGH POC
8.8
CVE-2020-36962 CRITICAL POC
9.8
CVE-2023-46401 CRITICAL POC
9.8
CVE-2025-56267 CRITICAL POC
9.8
CVE-2021-47901 CRITICAL POC
9.8
CVE-2020-36941 CRITICAL POC
9.8
CVE-2022-3574 CRITICAL POC
9.8
CVE-2022-3463 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2022-3558 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy