Filters apply as you choose them.
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.