CVE-2022-1572

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscriber, which could allow them to delete arbitrary file

Affected

HTML2WP

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CVSS v2.0 NVD

5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.54% chance of exploitation in the next 30 days, 44th percentile

Published

2022-06-27

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/9afd1805-d449-4551-986a-f92cb47c95c5

References

• CVE Record
• NVD entry