Description
Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Stage Rock Convert plugin <= 2.11.0 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Stage | Rock Convert (WordPress plugin) | <= 2.11.0 – ≤ 2.11.0 | — |
Medium · 4.8
CVE-2022-36428
EUVD-2022-39140GHSA-8g29-4rmw-qr86
WordPress Rock Convert plugin <= 2.11.0 - Auth. Cross-Site Scripting (XSS) vulnerability
Published Nov 3, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack