Lucene search
+L

5350 matches found

OSV
OSV
added 2026/01/28 6:30 p.m.19 views

GHSA-4Q3W-JGFX-4792 Tendenci is Vulnerable to CSV Formula Injection through its Contact Form Message Field

Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when...

9.8CVSS5.8AI score0.10683EPSS
SaveExploits1References7
NVD
NVD
added 2026/01/28 6:16 p.m.20 views

CVE-2020-36962

Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when...

9.8CVSS0.10683EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/01/28 5:35 p.m.9 views

EUVD-2020-30887

Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when...

9.8CVSS6.1AI score0.10683EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/28 7:16 a.m.9 views

CVE-2026-0825

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to download...

5.3CVSS0.00408EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/01/28 6:43 a.m.8 views

CVE-2026-0825 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to download...

5.3CVSS5.9AI score0.00408EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/01/28 6:43 a.m.43 views

CVE-2026-0825 Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to download...

5.3CVSS0.00408EPSS
SaveExploits0References6
NVD
NVD
added 2026/01/28 6:15 a.m.12 views

CVE-2025-14610

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin not restricting which URLs can be fetched when importing CSV data from a URL in the Data Table widget. This makes it possible for...

7.2CVSS0.00284EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/28 5:30 a.m.38 views

CVE-2025-14610

CVE-2025-14610 : The WordPress plugin TableMaster for Elementor (versions up to and including 1.3.6) is vulnerable to authenticated SSRF via the csv_url parameter in the Data Table widget. An attacker with Author-level access or higher can trigger web requests to arbitrary locations (including lo...

7.2CVSS5.9AI score0.00284EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/28 5:30 a.m.46 views

CVE-2025-14610 TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin not restricting which URLs can be fetched when importing CSV data from a URL in the Data Table widget. This makes it possible for...

7.2CVSS0.00284EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/28 5:30 a.m.8 views

EUVD-2025-206417

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin not restricting which URLs can be fetched when importing CSV data from a URL in the Data Table widget. This makes it possible for...

7.2CVSS5.9AI score0.00284EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/28 5:30 a.m.6 views

CVE-2025-14610 TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin not restricting which URLs can be fetched when importing CSV data from a URL in the Data Table widget. This makes it possible for...

7.2CVSS5.9AI score0.00284EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/01/28 1:34 a.m.14 views

WordPress TableMaster for Elementor plugin <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter vulnerability

Authenticated Author+ Server-Side Request Forgery via 'csvurl' Parameter vulnerability discovered by WordFence in WordPress Plugin TableMaster for Elementor versions = 1.3.6...

7.2CVSS5.9AI score0.00284EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.27 views

PT-2026-5058

Name of the Vulnerable Software and Affected Versions TableMaster for Elementor versions up to and including 1.3.6 Description The TableMaster for Elementor plugin for WordPress is susceptible to Server-Side Request Forgery. This occurs because the plugin does not limit the URLs that can be...

7.2CVSS5.5AI score0.00284EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.13 views

Security vulnerabilities in the WordPress plugin database for Contact Form 7, WPforms, and Elementor Forms

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

5.3CVSS5.8AI score0.00408EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.28 views

PT-2026-5066

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the CSV export functionality in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to download...

5.3CVSS5.9AI score0.00408EPSS
SaveExploits0References7
NVD
NVD
added 2026/01/27 4:16 p.m.32 views

CVE-2020-36941

Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers. Attackers can manipulate server response headers to include spreadsheet formulas that will execute when the CSV is opened in spreadsheet...

9.8CVSS0.00494EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/27 3:23 p.m.28 views

CVE-2021-47901 dirsearch 0.4.1 - CSV Injection

Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report...

9.8CVSS0.0038EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/27 3:23 p.m.19 views

CVE-2021-47901

Dirsearch 0.4.1 is affected by a CSV injection vulnerability exploitable via the --csv-report flag. An attacker can craft malicious server redirects with comma-separated paths containing Excel formulas, enabling manipulation of the generated CSV report. The issue is described across multiple sour...

9.8CVSS5.9AI score0.0038EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/27 3:23 p.m.7 views

CVE-2020-36941

Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers. Attackers can manipulate server response headers to include spreadsheet formulas that will execute when the CSV is opened in spreadsheet...

9.8CVSS6AI score0.00494EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.24 views

dirsearch security vulnerabilities

dirsearch is a network scanner developed by Mauro Soria. Version 0.4.1 of dirsearch contains a security vulnerability. This vulnerability arises from improper handling of redirect endpoints when using the --csv-report flag, which may allow attackers to inject malicious formulas...

9.8CVSS5.8AI score0.0038EPSS
SaveExploits0References3
Rows per page
Query Builder