CVE-2020-22276

WeForms WordPress Plugin 1.4.7 allows CSV injection via a form’s entry.