Description The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter. References https://wpvulndb.com/vulnerabilities/8702 https://wordpress.org/plugins/zx-csv-upload/#developers http://lenonleite.com.br/en/2016/12/16/english-zx_csv-upload-1-plugin-wordpress-sql-injection/