WordPress Event Tickets Plugin CSV Injection Vulnerability

WordPress is a blogging platform developed using the PHP language. photo-gallery is one of the photo gallery plugins used in it. A CSV injection vulnerability exists in the implementation of the WordPress Event Tickets plugin prior to version 4.10.7.2. The vulnerability stems from a lack of prope...

CVE-2019-16120

CSV injection in the event-tickets Event Tickets plugin before 4.10.7.2 for WordPress exists via the "All Post Ticketed Attendees" Export Attendees feature...

PT-2019-14524 · WordPress · Event Tickets

Name of the Vulnerable Software and Affected Versions: Event Tickets plugin for WordPress versions prior to 4.10.7.2 Description: The issue exists in the Event Tickets plugin for WordPress, specifically via the "All Post Ticketed Attendees" Export Attendees feature. This allows for CSV injection...