Html2wp (Html2wp Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-06-27. Vendor: Html2wp Project.

CVEs of Html2wp

• CVE-2022-1574 - CVSS 9.8 (critical), 2022-06-27: The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as a result,…
• CVE-2022-1573 - CVSS 4.3 (medium), 2022-06-27: The HTML2WP WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin…
• CVE-2022-1572 - CVSS 8.1 (high), 2022-06-27: The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as…