WordPress Plugin Vulnerabilities

WordCamp Talks <= 1.0.0-beta2 - Formula injection via CSV exports

Description

Fixed in version 1.0.0-beta3

Affects Plugins

Plugin icon
wordcamp-talks
No known fix

References

URL
https://hackerone.com/reports/277525
URL
https://github.com/imath/wordcamp-talks/commit/170f7f025990ce82db6e79aacc1d2f208f4600b0

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
13e4afc7-1af0-43b0-8f07-fa945e1b3a46

Timeline

Publicly Published
2017-10-18 (about 8 years ago)
Added
2017-10-30 (about 8 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2023-06-02
Title
Contact Form Builder by vcita < 4.10.2 - Contributor+ Stored Cross-Site Scripting
Published
2026-01-20
Title
Admin and Site Enhancements (ASE) < 7.6.3 - Subscriber+ Privilege Escalation
Published
2019-10-25
Title
WP HTML Mail < 2.9.1 - HTML Injection
Published
2014-08-01
Title
Persuasion <= 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2014-09-17
Title
FormCraft <= 2.0.5 - Arbitrary File Deletion