CVE-2022-4260 Scanner
CVE-2022-4260 scanner - Cross-Site Scripting (XSS) vulnerability in WP-Ban plugin for WordPress
Used 2.2k times · 4.2k assets checked · domain, ipv4, subdomain
CVE
CVE-2022-4260
4.8
CVSSmedium
Exploitable remotely over the internet · requires high privileges · user interaction needed.
Description
The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Attack Vector
Network
Privileges Req.
High
User Interaction
Required
wp-ban
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: wp-ban
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →