Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-12	CVE-2022-0142	Unspecified vulnerability in Vfbpro Visual Form Builder The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution. network low complexity vfbpro critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.