CVE Database /
CVE-2018-11525
CVE · High
CVE-2018-11525 — Advanced Order Export For WooCommerce [woo-order-export-lite] < 1.5.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2018-11525
|
Advanced Order Export For WooCommerce [woo-order-export-lite] < 1.5.5 |
Improper Neutralization of Formula Elements in a CSV File |
High
7.8
|
< 1.5.5
|
1.5.5 |
2018-06-19 |
—
|
CVE-2018-11525
The Advanced Order Export For WooCommerce plugin through version 1.5.4 contains a CSV injection vulnerability. An attacker can exploit this flaw by injecting malicious formulas or commands into CSV export files. When a user opens the exported CSV file in a spreadsheet application, the injected content may be executed, potentially leading to data theft or system compromise. The vulnerability was patched in version 1.5.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings