WHA
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WHA Crossword (WordPress plugin) | 2 | – | Sep 23, 2022 |
| Word Search Puzzles game (WordPress plugin) | 2 | – | Sep 21, 2022 |
| WHA Puzzle | 1 | – | Apr 18, 2023 |
Exploited and recent CVEs
- CVE-2022-45839 WordPress WHA Puzzle Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-37330 WordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.5%
- CVE-2022-36365 WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.7%
- CVE-2022-36383 WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities 0.5%
- CVE-2022-37335 WordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%