What’s Vulnerable › Vulnerabilities

CVE-2022-29415: WordPress Ravpage plugin <= 2.16 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-28 · updated 2026-06-17
• Weakness: CWE-79

Description

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 at WordPress.

Affected products

• Mati Skiba @ Rav Messer Ravpage (WordPress plugin): through 2.16

References

• https://patchstack.com/database/vulnerability/ravpage/wordpress-ravpage-plugin-2-16-unauthenticated-reflected-cross-site-scripting-xss-vulnerability
• https://wordpress.org/plugins/ravpage/
• https://patchstack.com/database/vulnerability/ravpage/wordpress-ravpage-plugin-2-16-unauthenticated-reflected-cross-site-scripting-xss-vulnerability
• https://wordpress.org/plugins/ravpage/

Get alerted when CVE-2022-29415 or the next vulnerability affects your stack