[CVE-2022-3402] Log HTTP Requests, Version 1.3.1, Advisory

CVE

CVE-2022-3402

Published

2022-11-21 00:00

Collected

2026-07-08 00:24

---
id: 3987
title: "[CVE-2022-3402] Log HTTP Requests, Version 1.3.1, Advisory"
cve: CVE-2022-3402
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/log-http-requests-advisory"
published_at: "2022-11-21T00:00:00Z"
tags: ["web-security", "wordpress", "xss", "vulnerability", "security-advisory", "cve-2022-3402"]
phying_url: "https://phying.com/item/3987"
lang: en
---

# [CVE-2022-3402] Log HTTP Requests, Version 1.3.1, Advisory

## Summary

Advisory on CVE-2022-3402: stored XSS in the Log HTTP Requests WordPress plugin (≤1.3.1) executes JavaScript whenever an admin views logged requests, enabling privilege escalation; fixed in 1.3.2.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2022-3402
- **Published:** 2022-11-21T00:00:00Z
- **Original:** https://bishopfox.com/blog/log-http-requests-advisory
- **Phying News:** https://phying.com/item/3987