Skip to content
OpenAdvisories
Medium · 4.8 CVE-2022-37335 EUVD-2022-39969GHSA-65jc-4ffp-3p86

WordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WHA Product: Word Search Puzzles game (WordPress plugin) Category: Web / CMS

Description

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in WHA's Word Search Puzzles game plugin <= 2.0.1 at WordPress.

Affected products

VendorProductAffectedFixed
WHA Word Search Puzzles game (WordPress plugin) <= 2.0.1 – ≤ 2.0.1 —

References