GCVE - cpe:2.3:a:culture_object_project:culture

Approved changes feed: RSS · Atom

cpe:2.3:a:culture_object_project:culture_object:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Culture Object Project (`cded2c0b-cf9e-562b-8505-59ab806e1a4a`)
Product	Culture Object (`4730c89d-ffa5-5ee0-a7c0-442e972084d6`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/wpplugins/culture-object`	purl2cpe	2026-06-01 10:13:19.910577

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36356`	vulnerable	2026-06-08 05:46:07.062463	WordPress Culture Object plugin <= 4.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability MEDIUM (4.8) Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy / Thirty8 Digital Culture Object plugin <= 4.0.1 at WordPress. Published: 2022-09-09T14:39:53.274Z Updated: 2026-04-28T16:07:45.338Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/culture-object/wordpress-culture-object-plugin-4-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve https://wordpress.org/plugins/culture-object/#developers	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.