Html2wp Project - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2022-06-27.

Products

• Html2wp - 3 CVEs

Newest CVEs of Html2wp Project

• CVE-2022-1572 - CVSS 8.1 (high), 2022-06-27: The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as…
• CVE-2022-1574 - CVSS 9.8 (critical), 2022-06-27: The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as a result,…
• CVE-2022-1573 - CVSS 4.3 (medium), 2022-06-27: The HTML2WP WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin…