Skip to content

Search CVEs, vendors, products /

Log in Start free

Today Exploited tracker Weekly brief Vendors How it works Trust Pricing

Vendors / Unknown / WP Attachments

Unknown WP Attachments

CVE-2022-4330 Unrated WP Attachments < 5.0.6 - Admin+ Stored XSS 0.5%
CVE-2022-3469 Medium 4.8 WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting 0.6%

iPatch

Know what's exploitable on your machines — before attackers do.

Support: support@ipatch.net

Data sources & licenses System status Security & trust Privacy Terms

Contains data from the CISA Known Exploited Vulnerabilities Catalog. Use does not imply endorsement by CISA or DHS.

CVE® records © The MITRE Corporation, reproduced under the CVE Program Terms of Use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation.

Vulnerability data from OSV.dev and its upstream databases, under their respective licenses.

EPSS scores by FIRST.org and Empirical Security (https://www.first.org/epss). This product uses EPSS scores but is not endorsed or certified by the EPSS SIG.

Exploit-availability signals from CVSS-BT by Stephen Shaffer (MIT license), which aggregates Metasploit (BSD), Nuclei templates (MIT), PoC-in-GitHub (CC0) and NVD (public domain).

Threat data is provided as-is, without warranty. Always verify with your vendor.

© 2026 iPatch LLC