CVE-2022-3069

CVE-2022-3069 is a cross-site scripting (XSS) vulnerability affecting the WordLift WordPress plugin prior to version 3.37.2. The flaw stems from insufficient sanitization of plugin settings, allowing high-privilege users, such as administrators, to inject malicious scripts. While the CVSS score is 4.8 (Medium), indicating a network-based attack with low complexity, it requires high privileges and user interaction, leading to limited impact (partial confidentiality and integrity). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.