Skip to content
OpenAdvisories

Vendor

iworks

3 known vulnerabilities.

Products

PWA — easy way to Progressive Web App 1 Fleet Manager 1 Simple CSV Table 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-12960

    Simple CSV Table <= 1.0.1 - Directory Traversal to Authenticated (Contributor+) Arbitrary File Read

    The Simple CSV Table plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.1 via the `href` parameter in the `[csv]` shortcode. This is due to insufficient path validation before concatenating user-supplied input …

    iworks Simple CSV Table Web / CMS
  • Medium 4.4
    CVE-2025-12538

    Fleet Manager <= 2.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting

    The Fleet Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, …

    iworks Fleet Manager Web / CMS
  • Medium 6.4
    CVE-2024-8967

    PWA — easy way to Progressive Web App <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The PWA — easy way to Progressive Web App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for…

    iworks PWA — easy way to Progressive Web App Web / CMS