Vulnerabilities

TI-2022-22642 CVE-2022-45839 · GHSA-hm6w-2fjv-w79j

WordPress WHA Puzzle Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

LOW 25

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00377 Published 2023-04-18 No fix listed CWE-79

TI-2022-17404 CVE-2022-37330 · GHSA-ph7r-3p2x-7pq8

LOW 25

Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA Crossword plugin <= 1.1.10 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2022-09-23 No fix listed CWE-79

TI-2022-16706 CVE-2022-36365 · GHSA-37g5-jpqm-9jr7

LOW 26

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Crossword plugin <= 1.1.10 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00693 Published 2022-09-21 No fix listed CWE-79

TI-2022-16722 CVE-2022-36383 · GHSA-ggg4-hcxv-87v9

LOW 25

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Word Search Puzzles game plugin <= 2.0.1 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2022-09-21 No fix listed CWE-79

TI-2022-17409 CVE-2022-37335 · GHSA-65jc-4ffp-3p86

LOW 23

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in WHA's Word Search Puzzles game plugin <= 2.0.1 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00562 Published 2022-09-09 No fix listed CWE-79