html2wp project records

3 published records for vendor html2wp project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
43Plan	CVE-2022-1574Proof of concept	HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Uploadhtml2wp project · html2wp · CWE-352 Pre-auth File upload CSRF	Critical9.8	—	12.2%	Jun 27, 2022
32Monitor	CVE-2022-1572No exploit	HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletionhtml2wp project · html2wp · CWE-352 CSRF	High8.1	—	0.5%	Jun 27, 2022
17Monitor	CVE-2022-1573No exploit	HTML2WP <= 1.0.0 - Arbitrary Settings Update via CSRFhtml2wp project · html2wp · CWE-352 Pre-auth CSRF	Medium4.3	—	0.4%	Jun 27, 2022

CVE-2022-1574
43Plan
HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload
CriticalCVSS 9.8Proof of conceptEPSS 12%
html2wp project · html2wpJun 27, 2022
CVE-2022-1572
32Monitor
HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion
HighCVSS 8.1No exploitEPSS 1%
- CSRF
html2wp project · html2wpJun 27, 2022
CVE-2022-1573
17Monitor
HTML2WP <= 1.0.0 - Arbitrary Settings Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
html2wp project · html2wpJun 27, 2022