CVE-2021-4222

MEDIUM 4.8CVE-2021-4222 · Published 28/02/2022 · updated 17/06/2026

In short

CVE-2021-4222 is a MEDIUM (CVSS 4.8) vulnerability affecting wp-paginate (maxfoundry).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 56.9% of all vulnerabilities.
Fix: update to 2.1.4 or later.

Package	Affected versions	Patched versions
wp-paginate maxfoundry	`< 2.1.4`	`2.1.4`

Description

The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

References

packetstormsecurity.com/files/160800 · Exploit
wpscan.com/vulnerability/6df5f5b1-f10b-488e-80b3-2c024bbb8c78 · Exploit

More vulnerabilities in wp-paginate

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free