Medium severity6.8NVD Advisory· Published Jan 9, 2020· Updated Jun 17, 2026

CVE-2019-20180

Description

The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/TablePress plugindescription
WordPress/Tablepressllm-fuzzy
Range: =1.9.2
Package: https://wordpress.org/plugins/tablepress

Patches

Vulnerability mechanics

References

wordpress.org/support/topic/security-issue-cve-2019-20180-for-tablepress/nvdIssue TrackingThird Party Advisory
wpvulndb.com/vulnerabilities/10016nvdBroken Link
medium.com/%40Pablo0xSantiago/cve-2019-20180-tablepress-version-1-9-2-csv-injection-65309fcc8be8nvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000