CVE-2022-45816: dev4press gd bbpress attachments – CVSS 5.4 · Watchpost

← All vulnerabilities

CVE-2022-45816

中危 5.4CVE-2022-45816 · Published 06/12/2022 · updated 17/06/2026

要点

CVE-2022-45816 是影响 gd bbpress attachments (dev4press) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.45%，高于 38.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
gd bbpress attachments dev4press	`≤ 4.3.1`	No fix yet

Description

Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.

References

patchstack.com/database/vulnerability/gd-bbpress-attachments/wordpress-gd-bbpress-attachments-plugin-4-3-1-auth-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory

gd bbpress attachments 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free