CVE-2022-36383: Webhelpagency Wha Wordsearch

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Word Search Puzzles game plugin <= 2.0.1 at WordPress.

Affected products

• Webhelpagency Wha Wordsearch: up to and including 2.0.1

Published 2022-09-21. Last modified 2026-06-17.