CVE-2018-10504

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

• CWE-1236

• https://wordpress.org/plugins/form-maker/#developersThird Party Advisory
• https://www.exploit-db.com/exploits/44559/Exploit, Third Party Advisory, VDB Entry
• https://wordpress.org/plugins/form-maker/#developersThird Party Advisory
• https://www.exploit-db.com/exploits/44559/Exploit, Third Party Advisory, VDB Entry

Published

Apr 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10499This vulnerability allows local attackers to execute arbitra…
• CVE-2018-1050All versions of Samba from 4.0.0 onwards are vulnerable to a…4.3
• CVE-2018-10500This vulnerability allows local attackers to escalate privil…
• CVE-2018-10501This vulnerability allows local attackers to escalate privil…
• CVE-2018-10502This vulnerability allows local attackers to escalate privil…
• CVE-2018-10503An issue was discovered in index.php in baijiacms V4 v4_1_4_…8.8
• CVE-2018-10505A pool corruption privilege escalation vulnerability in Tren…
• CVE-2018-10506A out-of-bounds read information disclosure vulnerability in…
• CVE-2018-10507A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG co…
• CVE-2018-10508A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG co…
• CVE-2018-10509A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG co…
• CVE-2018-1051It was found that the fix for CVE-2016-9606 in versions 3.0.…