CVE-2022-43500

Published: Dec 5, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.

Affected (24)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Before 3.7.40
Wordpress Wordpress	From 3.8 to 3.8.40
Wordpress Wordpress	From 3.9 to 3.9.39
Wordpress Wordpress	From 4.0 to 4.0.37
Wordpress Wordpress	From 4.1 to 4.1.37
Wordpress Wordpress	From 4.2 to 4.2.34
Wordpress Wordpress	From 4.3 to 4.3.30
Wordpress Wordpress	From 4.4 to 4.4.29
Wordpress Wordpress	From 4.5 to 4.5.28
Wordpress Wordpress	From 4.6 to 4.6.25
Wordpress Wordpress	From 4.7 to 4.7.25
Wordpress Wordpress	From 4.8 to 4.8.21
Wordpress Wordpress	From 4.9 to 4.9.22
Wordpress Wordpress	From 5.0 to 5.0.18
Wordpress Wordpress	From 5.1 to 5.1.15
Wordpress Wordpress	From 5.2 to 5.2.17
Wordpress Wordpress	From 5.3 to 5.3.14
Wordpress Wordpress	From 5.4 to 5.4.12
Wordpress Wordpress	From 5.5 to 5.5.11
Wordpress Wordpress	From 5.6 to 5.6.10
Wordpress Wordpress	From 5.7 to 5.7.8
Wordpress Wordpress	From 5.8 to 5.8.6
Wordpress Wordpress	From 5.9 to 5.9.5
Wordpress Wordpress	From 6.0 to 6.0.3