CyberSecBulletin

Hyno vulnerabilities

We track 2 vulnerabilities in Hyno products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2023.

2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score

Latest Hyno vulnerabilities

  • 9.8 Critical severity

    Dropbox Folder Share: Inclusion of Functionality from Untrusted Control Sphere

    CVE-2023-4488HynoEPSS 1.09%

    The Dropbox Folder Share for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.9.7 via the editor-view.php file. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio

  • 7.2 High severity

    Dropbox Folder Share: Server-Side Request Forgery

    CVE-2023-3025Hyno

    The Dropbox Folder Share plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.9.7 via the 'link' parameter. This can allow unauthenticated attackers to make web requests to arbitrary locations originating from t