VULNERABILITY INTELLIGENCE

CVE-2020-11548

CVSS score9.8 CRITICAL

EPSS probability5.17%

CISA KEVNot currently listed

Published2020-04-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed.

Weakness classification

nvd@nist.gov: CWE-1236

Primary references

cve@mitre.org — Product, Third Party Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Product, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry