CVE-2022-3096

🗓️ 31 Oct 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 52 Views🌐 WEB

WP Total Hacks WordPress plugin 4.7.2 allows stored XSS attacks

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-3096	6 May 202516:22	–	circl
CNNVD	WordPress plugin WP Total Hacks 安全漏洞	31 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-3096 WP Total Hacks <= 4.7.2 - Subscriber+ Arbitrary Options Update to Stored XSS	31 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-42525	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3096	31 Oct 202216:15	–	nvd
OSV	CVE-2022-3096	31 Oct 202216:15	–	osv
Patchstack	WordPress WP Total Hacks plugin <= 4.7.2 - Auth. Arbitrary Options Update vulnerability leading to Stored Cross-Site Scripting (XSS)	10 Oct 202200:00	–	patchstack
Prion	Cross site scripting	31 Oct 202216:15	–	prion
Positive Technologies	PT-2022-20415 · WordPress · Wp Total Hacks	31 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3096	22 May 202522:07	–	redhatcve

NVD

Vulners

Node

wp_total_hacks_project wp_total_hacksRange≤4.7.2wordpress

[
  {
    "vendor": "Unknown",
    "product": "WP Total Hacks",
    "versions": [
      {
        "version": "4.7.2",
        "status": "affected",
        "lessThanOrEqual": "4.7.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/46996537-a874-4b2e-9cd7-7d0832f9704d

Parameter	Position	Path	Description	CWE
wfb_admin_footer_text	request body	wp-admin/	Stored XSS via insufficient sanitization when low-privilege users modify plugin settings (payload in wfb_admin_footer_text).	CWE-862, CWE-79

17 Jun 2026 04:58Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

EPSS0.00411

SSVC

cve-2022-3096 wp total hacks wordpress plugin stored xss nvd