Vulnerabilities

TI-2026-02057 CVE-2026-2425 · GHSA-f55w-q2x3-pjpf

hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter

LOW 27

The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.0.0.1 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00208 Published 2026-06-02 No fix listed CWE-79

TI-2025-06973 CVE-2025-7640 · GHSA-xrp5-4mrh-cc5r

hiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File Deletion

LOW 39

The hiWeb Export Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.0.0.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0106 Published 2025-07-24 No fix listed CWE-22

Vulnerabilities

Filters

hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter

hiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File Deletion