Skip to content
OpenAdvisories

Vendor

Harsh

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-23922 Public exploit

    WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder embed-ispring allows Upload a Web Shell to a Web Server.This issue affects iSpring Embedder: from n/a through <= 1.0.