Html2wp Project Html2wp
3 CVEs affecting Html2wp Project Html2wp. Latest disclosed: 2022-06-27. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1574 | Critical | 9.8 | 2022-06-27 | The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as a result, unauthent… |
CVE-2022-1572 | High | 8.1 | 2022-06-27 | The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscrib… |
CVE-2022-1573 | Medium | 4.3 | 2022-06-27 | The HTML2WP WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin… |