Browse all 3 CVE security advisories affecting thehp. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Thehp primarily develops enterprise networking equipment and software solutions, with a core focus on infrastructure connectivity and management. Historically, vulnerabilities in their products have commonly included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and authentication weaknesses. Security researchers have identified multiple critical issues in their firmware and web interfaces, with three CVEs currently documented. While no major public security incidents have been widely reported, their products' widespread deployment in corporate environments makes them potential high-value targets for exploitation, necessitating regular patching and security hardening measures.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-54218 | WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Plugin Settings Change vulnerability — AIO ContactCWE-862 | 6.5 | Medium | 2024-12-09 |
| CVE-2024-54219 | WordPress AIO Contact plugin <= 2.8.1 - Unauthenticated Site-Wide Cross Site Scripting (XSS) vulnerability — AIO ContactCWE-79 | 7.1 | High | 2024-12-09 |
This page lists every published CVE security advisory associated with thehp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.