CVE-2022-3139

The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3139

creationtimestamp| type| source ---|---|--- 2025-05-14 16:33:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16326...

CVE-2022-3139 We’re Open! < 1.42 - Admin+ Stored Cross-Site Scripting

The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3139 We’re Open! < 1.42 - Admin+ Stored Cross-Site Scripting

The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3139

The CVE-2022-3139 entry describes a Stored Cross-Site Scripting (XSS) flaw in the We’re Open! WordPress plugin prior to version 1.42. The issue arises because certain plugin settings are not properly sanitized/escaped, enabling high-privilege users (e.g., admins) to trigger XSS, even when unfilte...