CVE-2022-4946

5.4 mediumEPSS 0.4%

Medium (5.4) in accesspressthemes frontend post wordpress plugin. EPSS 0.4% chance of exploitation in the next 30 days.

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2023-06-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

accesspressthemes:frontend_post_wordpress_plugin

References

https://wpscan.com/vulnerability/6e222018-a3e0-4af0-846c-6f00b67dfbc0
https://wpscan.com/vulnerability/6e222018-a3e0-4af0-846c-6f00b67dfbc0

Check your stack JSON