Description
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPChill | CPO Shortcodes (WordPress plugin) | <= 1.5.0 – ≤ 1.5.0 | — |
Medium · 4.8
CVE-2022-40672
EUVD-2022-43943GHSA-5wwv-hh2v-ww89
WordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack