CVE-2019-20180

The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress.

• CWE-1236

• https://medium.com/%40Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8
• https://wordpress.org/support/topic/security-issue-cve-2019-20180-for-tablepress/#post-16282996Issue Tracking, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/10016Broken Link
• https://medium.com/%40Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8
• https://wordpress.org/support/topic/security-issue-cve-2019-20180-for-tablepress/#post-16282996Issue Tracking, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/10016Broken Link

Published

Jan 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20174Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFi…6.1
• CVE-2019-20175An issue was discovered in ide_dma_cb() in hw/ide/core.c in …7.5
• CVE-2019-20176In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered…7.5
• CVE-2019-20178Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisa…6.5
• CVE-2019-20179SOPlanning 1.45 has SQL injection via the user_list.php "by"…8.8
• CVE-2019-2018In resetPasswordInternal of DevicePolicyManagerService.java,…
• CVE-2019-20181The awesome-support plugin 5.8.0 for WordPress allows XSS vi…4.8
• CVE-2019-20182The FooGallery plugin 1.8.12 for WordPress allow XSS via the…4.8
• CVE-2019-20183uploadimage.php in Employee Records System 1.0 allows upload…7.2
• CVE-2019-20184KeePass 2.4.1 allows CSV injection in the title field of a C…7.8
• CVE-2019-2019In ce_t4t_data_cback of ce_t4t.cc, there is a possible out-o…
• CVE-2019-20191Oxygen XML Editor 21.1.1 allows XXE to read any file.7.5