Medium severity4.8NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026
CVE-2022-1265
CVE-2022-1265
Description
The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ait-pro:bulletproof_security:*:*:*:*:*:wordpress:*:*Range: <6.1
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <6.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/9b66819d-8479-4c0b-b206-7f7ff769f758nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.