WordPress Plugin Vulnerabilities

Flamingo < 2.1.1 - CSV Injection

Description

The Flamingo WordPress plugin was affected by a CSV Injection security vulnerability.

Affects Plugins

Plugin icon
flamingo
Fixed in 2.1.1

References

URL
https://fortiguard.com/zeroday/FG-VD-20-004
URL
https://contactform7.com/2020/01/15/heads-up-about-spreadsheet-vulnerabilities/

Miscellaneous

Original Researcher
Vishnupriya Ilango of Fortinet's FortiGuard Labs
Verified
No
WPVDB ID
810a985f-b671-4a69-b9c3-7f35d72e84de

Timeline

Publicly Published
2020-01-15 (about 6 years ago)
Added
2020-01-28 (about 6 years ago)
Last Updated
2020-01-29 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
AntiVirus 1.0 - PHP Backdoor Detection Bypass
Published
2023-05-11
Title
Announcement & Notification Banner – Bulletin < 3.7.0 - Subscriber+ Unauthorized Access and Modification
Published
2014-08-01
Title
dt-chocolate - Image Open redirect
Published
2026-01-15
Title
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit < 5.1.6 - Missing Authorization to Unauthenticated Rede Order Logs Deletion
Published
2023-05-30
Title
Nested Pages < 3.2.4 - Editor+ Plugin Settings Reset