Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: wibergsweb Clear all filters
TI-2024-35077 CVE-2024-52406 · GHSA-7jc4-w8g6-3f8v

WordPress CSV to html plugin <= 3.26 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in wibergsweb CSV to html csv-to-html allows Upload a Web Shell to a Web Server.This issue affects CSV to html: from n/a through <= 3.26.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-16 No fix listed CWE-434
TI-2024-06151 CVE-2024-6634 · GHSA-fm7q-p3x8-9hqq

Cross-site scripting in wibergsweb Master Currency WP

Priority LOW 28

The Master Currency WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's currencyconverterform shortcode in all versions up to, and including, 1.1.61 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-07-27 No fix listed CWE-79