3 matches found
CVE-2018-10504
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...
8.5CVSS0.04422EPSS
SaveExploits5References2
CVE-2018-10504: Improper Neutralization of Formula Elements in a CSV File
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection...
7.8CVSS7.4AI score0.04422EPSS
SaveExploits5References2
PT-2018-9925
Name of the Vulnerable Software and Affected Versions: Form Maker by WD plugin versions prior to 1.12.24 Description: The issue allows for CSV injection. Recommendations: For versions prior to 1.12.24, update to version 1.12.24 or later to resolve the issue...
7.8CVSS5.8AI score0.04422EPSS
SaveExploits5References4
20