WHA

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

WHA records in CISA KEV

No WHA vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2022-16706 CVE-2022-36365 · GHSA-37g5-jpqm-9jr7

LOW 26

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Crossword plugin <= 1.1.10 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00693 Published 2022-09-21 No fix listed CWE-79

TI-2022-22642 CVE-2022-45839 · GHSA-hm6w-2fjv-w79j

LOW 25

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00377 Published 2023-04-18 No fix listed CWE-79

TI-2022-17404 CVE-2022-37330 · GHSA-ph7r-3p2x-7pq8

LOW 25

Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA Crossword plugin <= 1.1.10 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2022-09-23 No fix listed CWE-79

TI-2022-16722 CVE-2022-36383 · GHSA-ggg4-hcxv-87v9

LOW 25

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Word Search Puzzles game plugin <= 2.0.1 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2022-09-21 No fix listed CWE-79

TI-2022-17409 CVE-2022-37335 · GHSA-65jc-4ffp-3p86

LOW 23

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in WHA's Word Search Puzzles game plugin <= 2.0.1 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00562 Published 2022-09-09 No fix listed CWE-79