wibergsweb

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wibergsweb records in CISA KEV

No wibergsweb vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-35077 CVE-2024-52406 · GHSA-7jc4-w8g6-3f8v

WordPress CSV to html plugin <= 3.26 - Arbitrary File Upload vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in wibergsweb CSV to html csv-to-html allows Upload a Web Shell to a Web Server.This issue affects CSV to html: from n/a through <= 3.26.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-16 No fix listed CWE-434

TI-2024-36364 CVE-2024-54275 · GHSA-qp8v-3468-8fwp

WordPress CSV to html plugin <= 3.08 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wibergsweb CSV to html csv-to-html allows Reflected XSS.This issue affects CSV to html: from n/a through <= 3.08.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00436 Published 2024-12-13 No fix listed CWE-79

TI-2024-06151 CVE-2024-6634 · GHSA-fm7q-p3x8-9hqq

Cross-site scripting in wibergsweb Master Currency WP

LOW 28

The Master Currency WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's currencyconverterform shortcode in all versions up to, and including, 1.1.61 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-07-27 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0