CVE-2022-3096 | BDVDB-2026-187521 Detail

Description#

The WP Total Hacks WordPress plugin through 4.7.2 does not prevent low privilege users from modifying the plugin's settings. This could allow users such as subscribers to perform Stored Cross-Site Scripting attacks against other users, like administrators, due to the lack of sanitisation and escaping as well.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-10-31Record published in the CVE List.
2. Version 22025-05-06Most recent update recorded in the CVE List.