CVE-2018-10504
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.
Date published : 2018-04-27
https://www.exploit-db.com/exploits/44559/
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder