Medium severity6.1NVD Advisory· Published Feb 28, 2022· Updated Jun 17, 2026

CVE-2022-0150

Description

The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Accessibility Helperllm-fuzzy
Range: <0.6.0.7
Package: https://wordpress.org/plugins/wp-accessibility-helper
Alex Volkov/Wp Accessibility Helper (wah)v5
Range: 0.6.0.7

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/7142a538-7c3d-4dd0-bd2c-cbd2efaf53c5nvdExploitThird Party Advisory
plugins.trac.wordpress.org/changeset/2661008nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000