Les utilisateurs Exporter du plugin CSV par WordPress permet 1.4.2 Injection CSV.
https://wpvulndb.com/vulnerabilities/10094
https://www.getastra.com/blog/911/plugin-exploit/csv-injection-in-export-users-to-csv-wordpress-plugin/
https://www.jinsonvarghese.com/csv-injection-in-export-users-to-csv-plugin/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9466