Read the docs

helloprint

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

helloprint records in CISA KEV

No helloprint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Helloprint 2 records MEDIUM

Records

2 records in Helloprint · all components

TI-2022-03584 CVE-2022-3908 · GHSA-g8mf-8j4g-35gm

Helloprint < 1.4.7 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00941 Published 2022-12-12 Fixed in 1.4.7
TI-2024-33954 CVE-2024-50525 · GHSA-q6pm-2rpj-3xp9

WordPress Helloprint plugin <= 2.0.4 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in helloprint Helloprint helloprint allows Upload a Web Shell to a Web Server.This issue affects Helloprint: from n/a through <= 2.0.4.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-11-04 No fix listed CWE-434
Open these records in search →