CVE-2022-4467

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected software

Vendor	Product	Versions
Unknown	Search & Filter	< 1.2.16

References

https://wpscan.com/vulnerability/54168861-c0b8-4de6-a9af-0ad5c20b4a45Exploit, Third Party Advisory
https://wpscan.com/vulnerability/54168861-c0b8-4de6-a9af-0ad5c20b4a45Exploit, Third Party Advisory

Timeline

Published: Jan 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-446708.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability CVE-2022-446717.8Windows Graphics Component Elevation of Privilege Vulnerability CVE-2022-446737.0Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability CVE-2022-446745.5Windows Bluetooth Driver Information Disclosure Vulnerability CVE-2022-446757.8Windows Bluetooth Driver Elevation of Privilege Vulnerability CVE-2022-446768.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability CVE-2022-446777.8Windows Projected File System Elevation of Privilege Vulnerability CVE-2022-446787.8Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-446796.5Windows Graphics Component Information Disclosure Vulnerability CVE-2022-44685.4The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before outputting them back CVE-2022-446807.8Windows Graphics Component Elevation of Privilege Vulnerability CVE-2022-446817.8Windows Print Spooler Elevation of Privilege Vulnerability