← Database

CVE-2022-1800

HIGH CVSS: 7.2 Published: 2022-06-13 Modified: 2026-06-17

Description

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability.

Affected Platforms

Soflyy Export Any Wordpress Data To Xml\/Csv

Weakness Type

CWE-89

References