Medium · 4.8 CVE-2022-44632 EUVD-2022-47568GHSA-9fqq-f56x-35gj

WordPress Content Repeater – Custom Posts Simplified Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)

Published Apr 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified plugin <= 1.1.13 versions.

Vendor	Product	Affected	Fixed
Denis Buka	Content Repeater – Custom Posts Simplified	≤ 1.1.13	—