Lucene search

CVE-2022-4716 WP Popups < 2.1.4.8 - Contributor+ Stored XSS

🗓️ 23 Jan 2023 14:27:31Reported by WPScanType

The WP Popups WordPress plugin before version 2.1.4.8 is vulnerable to Stored XSS, allowing contributors to attack high privilege users

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
wpvulndb	WP Popups < 2.1.4.8 - Contributor+ Stored XSS	28 Dec 202200:00	–	wpvulndb
patchstack	WordPress WP Popups Plugin < 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)	28 Dec 202200:00	–	patchstack
vulnrichment	CVE-2022-4716 WP Popups < 2.1.4.8 - Contributor+ Stored XSS	23 Jan 202314:31	–	vulnrichment
cve	CVE-2022-4716	23 Jan 202315:15	–	cve
prion	Cross site scripting	23 Jan 202315:15	–	prion
wpexploit	WP Popups < 2.1.4.8 - Contributor+ Stored XSS	28 Dec 202200:00	–	wpexploit
nvd	CVE-2022-4716	23 Jan 202315:15	–	nvd

[
  {
    "vendor": "Unknown",
    "product": "WP Popups",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.1.4.8"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/24176ad3-2317-4853-b4db-8394384d52cd

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jan 2023 14:31Current

5.5Medium risk

Vulners AI Score5.5

EPSS0.00113