CVE-2022-0429: Cerber Wp Cerber Security, Anti-Spam & Malware Scan

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.

Affected products

• Cerber Wp Cerber Security, Anti-Spam & Malware Scan: before 8.9.6 (fixed in 8.9.6)

Published 2022-03-07. Last modified 2026-06-17.