High · 7.1 CVE-2024-32595 EUVD-2024-30397GHSA-hm2q-8f77-qrwh

WordPress WP Helper Premium plugin < 4.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Published Apr 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Mat Bao Product: WP Helper Premium

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mat Bao Corp WP Helper Premium allows Reflected XSS.This issue affects WP Helper Premium: from n/a before 4.6.0.

Affected products

Vendor	Product	Affected	Fixed
Mat Bao	WP Helper Premium	< 4.6.0	4.6.0

References

https://patchstack.com/database/vulnerability/wp-helper-lite/wordpress-wp-helper-premium-plugin-4-6-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry