{
 "id": "WPSEC-2026-1662",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1662/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1662/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1662/index.md",
 "title": "Better Payment <= 2.4.2 - Unauthenticated CSV Injection via Payment Form Fields",
 "description": "The Better Payment plugin for WordPress is vulnerable to CSV Injection via payment form fields such as the payer's first and last name in all versions up to, and including, 2.4.2, due to the transaction export writing donor-supplied values to the CSV file without neutralizing cells that begin with formula characters. This makes it possible for unauthenticated attackers to embed spreadsheet formulas in a transaction. The formulas can run on the administrator's computer when an administrator exports transactions and opens the file in a spreadsheet application.",
 "plugin": {
  "slug": "better-payment",
  "name": "Better Payment",
  "full_name": "Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More",
  "wordpress_org": "https://wordpress.org/plugins/better-payment/",
  "advisories_url": "https://wpsec.com/vuln/plugin/better-payment/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/better-payment"
 },
 "type": "CSV INJECTION",
 "cwe": [
  "CWE-1236"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.4,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.4.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.4.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.4.3",
 "remediation": "Update to 2.4.3 or later.",
 "fix_released": "2026-10-25T10:25:49+00:00",
 "published": "2026-10-26T10:46:45+00:00",
 "updated": "2026-10-26T09:45:50.629458+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1662/",
  "https://plugins.svn.wordpress.org/better-payment/tags/2.4.3/",
  "https://wordpress.org/plugins/better-payment/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/better-payment",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-26"
 }
}