Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
WHA records in CISA KEVNo WHA vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 23
Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in WHA's Word Search Puzzles game plugin <= 2.0.1 at WordPress.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00562 · Published 2022-09-09 · No fix listed CWE-79
Open these records in search →