CVE-2020-11548

—

CVSS 3.1

9.8 critical

EPSS

5%p92

Published

Apr 5, 2020 (Apr 5, 2020)

Modified

Jun 17, 2026

Description

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed.

Vendors: search meter project
Products: search meter
Ecosystems: WordPress
Weakness: CWE-1236
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.2%)

In the news0 stories

No ingested article mentions this CVE yet.