den-media

Products

ProductCVEsExploitedLatest
hiWeb Export Posts1–Jul 24, 2025
hiWeb Migration Simple1–Jun 2, 2026

Exploited and recent CVEs

  • CVE-2026-2425 Medium 6.1 hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter 0.2%
  • CVE-2025-7640 High 8.1 hiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File Deletion 1.1%