WordPress Plugin Vulnerabilities

Events Manager < 5.9.7.2 - CSV Injection

Description

The Events Manager WordPress plugin was affected by a CSV Injection security vulnerability.

Affects Plugins

Plugin icon
events-manager
Fixed in 5.9.7.2

References

URL
https://wp-events-plugin.com/blog/2020/02/05/events-manager-5-9-7-2-pro-2-6-7-2/
URL
https://fortiguard.com/zeroday/FG-VD-20-034

Miscellaneous

Original Researcher
Vishnupriya Ilango of Fortinet's FortiGuard Labs
Verified
No
WPVDB ID
f201225d-2342-4cc5-aa45-b22177f7f3c3

Timeline

Publicly Published
2020-02-05 (about 6 years ago)
Added
2020-02-06 (about 6 years ago)
Last Updated
2020-02-26 (about 6 years ago)

Other

Published
Title
Published
2014-04-29
Title
Contact Bank 2.0.19 - Multiple Unspecified Issues
Published
2024-05-23
Title
Elementor Header & Footer Builder < 1.6.26.1 - Contributor+ Stored XSS
Published
2025-01-06
Title
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site < 1.4.0 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Published
2019-08-22
Title
Import Export WordPress Users < 1.3.2 - CSV Injection
Published
2014-09-17
Title
FormCraft <= 2.0.5 - Arbitrary File Deletion