CVE-2022-4468

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected software

VendorProductVersions
UnknownWP Recipe Maker< 8.6.1

References

Timeline

Published
Jan 9, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-446807.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2022-446817.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-446826.8Windows Hyper-V Denial of Service VulnerabilityCVE-2022-446837.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-446846.5Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2022-446877.8Raw Image Extension Remote Code Execution VulnerabilityCVE-2022-446884.3Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2022-446897.8Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityCVE-2022-44695.4The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before outputting them bacCVE-2022-446908.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-446917.8Microsoft Office OneNote Remote Code Execution VulnerabilityCVE-2022-446927.8Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-4468: Medium severity, CVSS 5.4 | Vulnix