CVEDB API

The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.024

EPSS Ranking 84.4%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2018-11526

Webtoffee » Wordpress Comments Import And Export » Version: 1.0.0

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:1.0.0
Webtoffee » Wordpress Comments Import And Export » Version: 1.0.1

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:1.0.1
Webtoffee » Wordpress Comments Import And Export » Version: 1.0.2

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:1.0.2
Webtoffee » Wordpress Comments Import And Export » Version: 1.0.3

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:1.0.3
Webtoffee » Wordpress Comments Import And Export » Version: 1.0.4

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:1.0.4
Webtoffee » Wordpress Comments Import And Export » Version: 2.0.0

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:2.0.0
Webtoffee » Wordpress Comments Import And Export » Version: 2.0.1

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:2.0.1
Webtoffee » Wordpress Comments Import And Export » Version: 2.0.2

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:2.0.2
Webtoffee » Wordpress Comments Import And Export » Version: 2.0.3

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:2.0.3
Webtoffee » Wordpress Comments Import And Export » Version: 2.0.4

cpe:2.3:a:webtoffee:wordpress_comments_import_and_export:2.0.4