CVE-2022-4946

MEDIUM 5.4CVE-2022-4946 · Published 05/06/2023 · updated 17/06/2026

In short

CVE-2022-4946 is a MEDIUM (CVSS 5.4) vulnerability affecting frontend post wordpress plugin (accesspressthemes).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
frontend post wordpress plugin accesspressthemes	`≤ 2.8.4`	No fix yet

Description

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.

References

wpscan.com/vulnerability/6e222018-a3e0-4af0-846c-6f00b67dfbc0 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free