Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP-EXPERTS.IN TEAM | WP Categories Widget | ≤ 2.2 | — |
High · 7.1
CVE-2023-31220
EUVD-2023-35535GHSA-qh7j-jqpc-f3xp
WordPress WP Categories Widget Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Published Sep 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack