TablePress – Tables in WordPress made easy, CVE-2019-20180
- CVE, Research URL
- Application
- Published on
- Jan 10, 2020
- Research Description
- The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress.
- Affected versions
-
Min -, max 2.0.
- Status
-
vulnerable