Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-42460 EUVD-2022-45533GHSA-c3p8-66jq-vjx5

WordPress Traffic Manager plugin <= 1.4.5 - Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS)

Published Nov 10, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Sed Lex Product: Traffic Manager (WordPress plugin) Category: Web / CMS

Description

Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress.

Affected products

VendorProductAffectedFixed
SedLex Traffic Manager (WordPress plugin) <= 1.4.5 – ≤ 1.4.5 —

References