CVE-2022-27845

2022-04-1120:15:23

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2

CPENameOperatorVersion
wordpresseq1.1.0.alpha.2
wordpresseq1.1.0.alpha.3
wordpresseq1.0.0
wordpresseq1.2.0.alpha.2
wordpresseq1.2.2
wordpresseq1.2.1
wordpresseq1.1.0
wordpresseq1.2.0
wordpresseq1.2.0.alpha.1
wordpresseq1.2.2.beta.1

Name	Operator	Version
wordpress	eq	1.1.0.alpha.2
wordpress	eq	1.1.0.alpha.3
wordpress	eq	1.0.0
wordpress	eq	1.2.0.alpha.2
wordpress	eq	1.2.2
wordpress	eq	1.2.1
wordpress	eq	1.1.0
wordpress	eq	1.2.0
wordpress	eq	1.2.0.alpha.1
wordpress	eq	1.2.2.beta.1

Rows per page:

1-10 of 131

References

patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-2-2-authenticated-stored-cross-site-scripting-xss-vulnerability

wordpress.org/plugins/plausible-analytics/#developers