CVE-2019-16120

CVE-2019-16120

EPSS 3.2%

CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://wordpress.org/plugins/event-tickets/#developers https://wpvulndb.com/vulnerabilities/9858 https://www.exploit-db.com/exploits/47335