CVE-2022-4790

MEDIUM 5.4CVE-2022-4790 · Published 23/01/2023 · updated 17/06/2026

In short

CVE-2022-4790 is a MEDIUM (CVSS 5.4) vulnerability affecting auto publish for google my business (auto publish for google my business project).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.3% of all vulnerabilities.
Fix: update to 3.4 or later.

Package	Affected versions	Patched versions
auto publish for google my business auto_publish_for_google_my_business_project	`< 3.4`	`3.4`

Description

The WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

References

wpscan.com/vulnerability/c01f9d36-955d-432c-8a09-ea9ee750f1a1 · Exploit

More vulnerabilities in auto publish for google my business

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free