Description
Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Milan Petrovic | GD bbPress Attachments | ≤ 4.3.1 | — |
Medium · 4.8
CVE-2022-45816
EUVD-2022-48670GHSA-2wph-jf27-55c8
WordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)
Published Dec 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack