CVE-2022-29444: 
WordPress vulnerability analysis and mitigation

The WordPress Breeze plugin version 2.0.2 and earlier contained a Cross-Site Scripting (XSS) vulnerability identified as CVE-2022-29444. This security issue was discovered on May 2, 2022, affecting users with subscriber-level privileges. The vulnerability was found in the plugin settings change functionality (Patchstack).

The vulnerability has been assigned a CVSS score of 6.5 (High), indicating a significant security risk. The issue allows attackers to inject malicious scripts, which could be executed when visitors access the affected site. The vulnerability affects all versions of the Breeze plugin up to and including version 2.0.2 (Patchstack).

When exploited, this vulnerability could allow malicious actors to inject scripts that could lead to various attacks including redirects, unwanted advertisements, and other malicious HTML payloads that would execute when guests visit the affected site (Patchstack).

The vulnerability was patched in version 2.0.3 of the Breeze plugin. Users are strongly advised to update to this version or later to resolve the security issue. For users unable to update immediately, Patchstack has issued a virtual patch to mitigate this issue by blocking potential attacks (Patchstack).