Hundred Plus vulnerabilities
We track 2 vulnerabilities in Hundred Plus products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2025.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Hundred Plus vulnerabilities
- 7.2 High severity
EIP Plus: Unrestricted Upload of File with Dangerous Type
EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 9.8 Critical severity
EIP Plus: Weak Password Recovery Mechanism for Forgotten Password
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password.