CVE-2022-43500

Published: Dec 5, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.

Affected (24)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	version < 3.7.40
Wordpress Wordpress	3.8 ≤ version < 3.8.40
Wordpress Wordpress	3.9 ≤ version < 3.9.39
Wordpress Wordpress	4.0 ≤ version < 4.0.37
Wordpress Wordpress	4.1 ≤ version < 4.1.37
Wordpress Wordpress	4.2 ≤ version < 4.2.34
Wordpress Wordpress	4.3 ≤ version < 4.3.30
Wordpress Wordpress	4.4 ≤ version < 4.4.29
Wordpress Wordpress	4.5 ≤ version < 4.5.28
Wordpress Wordpress	4.6 ≤ version < 4.6.25
Wordpress Wordpress	4.7 ≤ version < 4.7.25
Wordpress Wordpress	4.8 ≤ version < 4.8.21
Wordpress Wordpress	4.9 ≤ version < 4.9.22
Wordpress Wordpress	5.0 ≤ version < 5.0.18
Wordpress Wordpress	5.1 ≤ version < 5.1.15
Wordpress Wordpress	5.2 ≤ version < 5.2.17
Wordpress Wordpress	5.3 ≤ version < 5.3.14
Wordpress Wordpress	5.4 ≤ version < 5.4.12
Wordpress Wordpress	5.5 ≤ version < 5.5.11
Wordpress Wordpress	5.6 ≤ version < 5.6.10
Wordpress Wordpress	5.7 ≤ version < 5.7.8
Wordpress Wordpress	5.8 ≤ version < 5.8.6
Wordpress Wordpress	5.9 ≤ version < 5.9.5
Wordpress Wordpress	6.0 ≤ version < 6.0.3