Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Stephenson WP-CORS plugin <= 0.2.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tim Stephenson | WP-CORS | ≤ 0.2.1 | — |
Medium · 5.9
CVE-2022-47606
EUVD-2022-50366GHSA-869f-57m4-c63v
WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)
Published May 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack