Medium · 5.4 CVE-2022-36365 EUVD-2022-39079GHSA-37g5-jpqm-9jr7

WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Published Sep 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Crossword plugin <= 1.1.10 at WordPress.

Vendor	Product	Affected	Fixed
WHA	WHA Crossword (WordPress plugin)	<= 1.1.10 – ≤ 1.1.10	—