{"cvss":0.0,"datePublished":"2025-11-18T00:00:00Z","dateUpdated":"2025-11-18T00:00:00Z","description":"The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as a result, unauthenticated attackers can upload arbitrary files (such as PHP) on the remote server","dueDate":"","id":"CVE-2022-1574","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"html2wp","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"html2wp_project html2wp Cross-Site Request Forgery","vendor":"html2wp_project"}