← Back

Wp Downgrade

wp_downgrade

Vendor: Wp Downgrade Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1001
1Wp Downgrade Project
1Wp Downgrade
Jun 17, 2026
Apr 18, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" settings, but does not sanitise and escape it server side, allowing high privilege users such as admin...Show more
The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" settings, but does not sanitise and escape it server side, allowing high privilege users such as admin to perform Cross-Site attacks even when the unfiltered_html capability is disallowedShow less