2022 CVE Vulnerabilities
27,526 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41695 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5... |
| CVE-2022-41619 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8. |
| CVE-2022-40702 | MEDIUM | 4.3 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pic... |
| CVE-2022-40203 | HIGH | 8.8 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dy... |
| CVE-2022-38141 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email fo... |
| CVE-2022-36418 | CRITICAL | 9.8 | 0.7% | Jan 17, 2024 | Missing Authorization vulnerability in Vagary Digital HREFLANG Tags Lite.This issue affects HREFLANG Tags Lite: from n/a... |
| CVE-2022-31021 | MEDIUM | 5.3 | 0.4% | Jan 16, 2024 | Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is ... |
| CVE-2022-3899 | HIGH | 8.1 | 0.4% | Jan 16, 2024 | The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File M... |
| CVE-2022-3836 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high ... |
| CVE-2022-3829 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could a... |
| CVE-2022-3764 | HIGH | 7.2 | 1.0% | Jan 16, 2024 | The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. |
| CVE-2022-3739 | MEDIUM | 5.4 | 0.7% | Jan 16, 2024 | The WP Best Quiz WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with... |
| CVE-2022-3604 | HIGH | 7.8 | 0.4% | Jan 16, 2024 | The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could... |
| CVE-2022-3194 | MEDIUM | 5.4 | 0.5% | Jan 16, 2024 | The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allo... |
| CVE-2022-2413 | MEDIUM | 5.4 | 0.5% | Jan 16, 2024 | The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting... |
| CVE-2022-23180 | MEDIUM | 4.3 | 0.5% | Jan 16, 2024 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks... |
| CVE-2022-23179 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields bef... |
| CVE-2022-1760 | MEDIUM | 4.3 | 0.3% | Jan 16, 2024 | The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which coul... |
| CVE-2022-1618 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lackin... |
| CVE-2022-1617 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacki... |
| CVE-2022-1609 | CRITICAL | 9.8 | 64.3% | Jan 16, 2024 | The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking co... |
| CVE-2022-1563 | MEDIUM | 5.3 | 0.7% | Jan 16, 2024 | The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a s... |
| CVE-2022-1538 | HIGH | 7.2 | 1.2% | Jan 16, 2024 | Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such ... |
| CVE-2022-0775 | MEDIUM | 4.3 | 0.7% | Jan 16, 2024 | The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which coul... |
| CVE-2022-0402 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zost... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now