CVE-2022-37335: Webhelpagency Word Search Puzzles

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in WHA's Word Search Puzzles game plugin <= 2.0.1 at WordPress.

Affected products

• Webhelpagency Word Search Puzzles: up to and including 2.0.1

Published 2022-09-09. Last modified 2026-06-17.