TI-2025-08021 CVE-2025-8767 · GHSA-57x8-gcv2-wr5x
AnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injection
Priority LOW 22
The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'download_csv_players' and 'download_csv_games' functions.