Read the docs
TI-2022-01443 Aliases CVE-2022-1572GHSA-c938-72w7-26mv

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

Priority LOW 36CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Tampering, Security bypass
Confidentiality · integrity · availability
None · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352 and CWE-862.

Summary

The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscriber, which could allow them to delete arbitrary file

Why it matters now

EPSS 0.00537 45th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
UnknownHTML2WPup to 1.0.0—No fix listedCNA
  • HTML2WP VendorUnknown Affected up to 1.0.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:html2wp_project:html2wp:*:*:*:*:*:wordpress:*:*up to 1.0.0VulnerableHtml2wp Project
  • cpe:2.3:a:html2wp_project:html2wp:*:*:*:*:*:wordpress:*:* Versions up to 1.0.0 Vulnerable ·Html2wp Project

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1572
  2. 2026-10-03 Alias added: GHSA-c938-72w7-26mv

References

Exploit 1

  • TI-2022-01445 HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload CVSS 3.1CRITICAL 9.8
  • TI-2022-01444 HTML2WP <= 1.0.0 - Arbitrary Settings Update via CSRF CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences