Vulnerabilities > CVE-2022-1572 - Missing Authorization vulnerability in Html2Wp Project Html2Wp
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
HIGH Availability impact
HIGH Summary
The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscriber, which could allow them to delete arbitrary file
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |