LiveActive security incident?Get immediate response
CVE Record

CVE-2020-22275: Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malici...

Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysisunknown

Security readout for executives and security teams

Plain-English summary

CVE-2020-22275 describes a CSV command injection issue in Easy Registration Forms (ER Forms) WordPress Plugin 2.0.6. An attacker can submit malicious form content, and risk appears when an administrator exports form data to CSV. Public sources do not provide CVSS, a confirmed patch, or evidence of active exploitation.

Executive priority

Prioritize as a targeted web application data-handling risk if ER Forms 2.0.6 is present. Business urgency is moderate for exposed public forms with CSV exports, but overall severity cannot be confidently rated from the supplied sources.

Technical view

The source description says ER Forms 2.0.6 does not properly check submitted input before generating CSV output from form entries, allowing malicious CSV commands to be included. The affected metadata is incomplete and lists no CPEs, vendor, CWE, or CVSS score, so exposure should be validated from local plugin inventory.

Likely exposure

Likely limited to WordPress sites running Easy Registration Forms / ER Forms version 2.0.6, especially where public users can submit forms and administrators export entries as CSV. The source bundle does not confirm other affected versions.

Exploitation context

The CVE is not listed as KEV in the supplied bundle, and no cited source states active exploitation. The described path requires malicious form submission followed by administrator CSV export handling. Evidence is sparse, with no reliable exploit maturity details in the bundle.

Researcher notes

The CVE record gives a concise vulnerability description but lacks CVSS, CWE, CPE, exploit status, and remediation details. Analysis should avoid assuming broader version impact or active exploitation. Validate against installed plugin code and maintainer advisories before assigning operational severity.

Mitigation direction

  • Check vendor or plugin maintainer guidance for a fixed release or advisory.
  • Inventory WordPress sites for ER Forms and confirm exact installed versions.
  • Disable or replace ER Forms 2.0.6 if no maintained fix is available.
  • Restrict form submission and CSV export access until exposure is resolved.
  • Treat exported CSV files from affected forms as untrusted data.

Validation and detection

  • Confirm whether Easy Registration Forms / ER Forms 2.0.6 is installed.
  • Review which forms accept untrusted or public submissions.
  • Check whether administrators export submitted entries to CSV.
  • Look for suspicious formula-like content in recent form entries.
  • Document findings because public affected-version metadata is incomplete.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2020-22275 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
3Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.