CVE-2018-11525 - The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection

HIGH

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection

Published Jun 19, 2018

7.8

HIGH

CVSS 3.0

EPSS 5.14%

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

No remediation recorded yet.

Weaknesses (1)

CWE-1236

Link	Providers	Tags
https://wordpress.org/plugins/woo-order-export-lite/#developers		x_refsource_CONFIRMThird Party Advisory
https://wpvulndb.com/vulnerabilities/9096		x_refsource_MISCThird Party Advisory
https://www.exploit-db.com/exploits/44931/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 19, 2018

Updated Aug 5, 2024

Reserved May 29, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a