Medium · 5.4 CVE-2022-36383 EUVD-2022-39096GHSA-ggg4-hcxv-87v9

WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Published Sep 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Word Search Puzzles game plugin <= 2.0.1 at WordPress.

Vendor	Product	Affected	Fixed
WHA	Word Search Puzzles game (WordPress plugin)	<= 2.0.1 – ≤ 2.0.1	—