CVE-2022-2391: Wpzoom Inspiro Pro

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description.

Affected products

• Wpzoom Inspiro Pro: before 7.2.3 (fixed in 7.2.3)

Published 2022-08-08. Last modified 2026-06-17.