Medium · 4.8 CVE-2022-38068 EUVD-2022-40673GHSA-c3j7-gmm4-7682

WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apasionados Export Post Info plugin <= 1.1.0 at WordPress.

Vendor	Product	Affected	Fixed
Apasionados	Export Post Info (WordPress plugin)	<= 1.1.0 – ≤ 1.1.0	—