CVE-2022-3604

Published: Jan 16, 2024

Modified: Jun 11, 2025

PUBLISHED

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.

Vendor	Product	Versions
Unknown	Contact Form Entries	affected `0 - < 1.3.0`

exploit

vdb-entry

technical-description

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.