Html2wp Project Html2wp — known CVE vulnerabilities

Every CVE whose affected-product data names Html2wp Project Html2wp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-1574 — CVSS 9.8 (critical): The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as…
• CVE-2022-1572 — CVSS 8.1 (high): The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated…
• CVE-2022-1573 — CVSS 4.3 (medium): The HTML2WP WordPress plugin through 1.0.0 does not have CSRF check in place when updating its settings, which could allow attackers to…