Medium · 6.1 CVE-2022-38075 EUVD-2022-40678GHSA-8gwq-qp6x-5852

WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin <= 0.13 on WordPress.

Vendor	Product	Affected	Fixed
Carlos Doral	Mantenimiento web (WordPress plugin)	<= 0.13 – ≤ 0.13	—