Medium · 4.8 CVE-2022-36282 EUVD-2022-38999GHSA-jcf3-c57g-x3rf

WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Aug 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Roman Pronskiy's Search Exclude plugin <= 1.2.6 at WordPress.

Vendor	Product	Affected	Fixed
Roman Pronskiy	Search Exclude (WordPress plugin)	<= 1.2.6 – ≤ 1.2.6	—