blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-1763

MEDIUM 5.4 CVSS 3.1
Published
June 13, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-352
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also lead to Stored Cross-Site Scripting due to the lack of escaping in some of the settings

Affected products and versions

  • Unknown Static Page eXtended — From 2.1 (including) to 2.1 (including)
  • static_page_extended_project static_page_extended — Up to and including 2.1

References

  • wpscan.com https://wpscan.com/vulnerability/bd3aff73-078a-4e5a-b9e3-1604851c6df8 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record