CVE-2022-46803: WordPress Simple Newsletter Plugin – Noptin plugin <= 1.9.5 - Unauth. CSV Injection vulnerability
A vulnerability in Noptin Newsletter Team Noptin newsletter-optin-box.This issue affects Noptin: from n/a through <= 1.9.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-46803?
The severity of CVE-2022-46803 is critical with a CVSS score of 9.8.
What is the vulnerability in the Noptin Plugin?
The vulnerability in the Noptin Plugin is CSV Injection in versions up to 1.9.5.
How does the CSV Injection vulnerability in Noptin Plugin affect my website?
The CSV Injection vulnerability in Noptin Plugin could allow an attacker to inject malicious formulas into a CSV file exported from the plugin, potentially leading to arbitrary code execution or data manipulation.
How can I fix the CSV Injection vulnerability in Noptin Plugin?
To fix the CSV Injection vulnerability, update Noptin Plugin to version 1.9.6 or later.
Where can I find more information about the CVE-2022-46803 vulnerability?
For more information about the CVE-2022-46803 vulnerability, refer to the following link: [CVE-2022-46803](https://patchstack.com/database/vulnerability/newsletter-optin-box/wordpress-simple-newsletter-plugin-noptin-plugin-1-9-5-unauth-csv-injection-vulnerability?_s_id=cve)