CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2022-44738

WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection

Status: Published
Published: 2023-11-07
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: from n/a through 1.1.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Patrick Robrecht Posts and Users Stats

Default version status: unaffected

n/a to ≤ 1.1.3affected

References

https://patchstack.com/database/vulnerability/posts-and-users-stats/wordpress-posts-and-users-stats-plugin-1-1-3-csv-injection-vulnerability?_s_id=cve ↗