CVE-2022-0150: Wp Accessibility Helper Project Wp Accessibility Helper

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue

Affected products

• Wp Accessibility Helper Project Wp Accessibility Helper: before 0.6.0.7 (fixed in 0.6.0.7)

Published 2022-02-28. Last modified 2026-06-17.