| Package | Affected versions | Patched versions |
|---|---|---|
| tablepress | ≤ 1.9.2 |
The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free