CVE

CVE-2022-0150

6.1

CVSS

Description

The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue

Attack Vector

Privileges Req.

User Interaction

wp accessibility helper (wah)

Updated Oct 12, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0150 Scanner

CVE-2022-0150 scanner - Cross-Site Scripting (XSS) vulnerability in Accessibility Helper (WAH) plugin for WordPress

Used 3.1k times · 3.3k assets checked · url

Scanner page →Run scanner

CVE history: wp accessibility helper (wah)

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →