CVE-2022-3574

CRITICAL CVSS: 9.8 Published: 2022-11-14 Modified: 2026-06-17

Description

The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.

Affected Platforms

Wpforms Wpforms Pro

Weakness Type

CWE-1236

References