Medium · 4.8 CVE-2022-36356 EUVD-2022-39072GHSA-cf7f-82qc-pc83

WordPress Culture Object plugin <= 4.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy / Thirty8 Digital Culture Object plugin <= 4.0.1 at WordPress.

Vendor	Product	Affected	Fixed
Liam Gladdy / Thirty8 Digital	Culture Object (WordPress plugin)	<= 4.0.1 – ≤ 4.0.1	—