Vendor
The Gutenverse Form plugin for WordPress contains a CSV formula injection vulnerability that allows unauthenticated attackers to submit malicious payloads via the public form-submit REST route, which can result in command execution when an administrator opens exported form data.