2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45083 | HIGH | 7.2 | 0.6% | Jan 19, 2024 | Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User ... |
| CVE-2022-40700 | CRITICAL | 9.8 | 1.0% | Jan 19, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO ... |
| CVE-2022-42884 | HIGH | 8.8 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a th... |
| CVE-2022-41790 | HIGH | 8.8 | 0.5% | Jan 17, 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Fo... |
| CVE-2022-41786 | CRITICAL | 9.8 | 0.5% | Jan 17, 2024 | Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Port... |
| CVE-2022-41990 | HIGH | 8.8 | 0.2% | Jan 17, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Ta... |
| CVE-2022-41695 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5... |
| CVE-2022-41619 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8. |
| CVE-2022-40702 | MEDIUM | 4.3 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pic... |
| CVE-2022-40203 | HIGH | 8.8 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dy... |
| CVE-2022-38141 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email fo... |
| CVE-2022-36418 | CRITICAL | 9.8 | 0.7% | Jan 17, 2024 | Missing Authorization vulnerability in Vagary Digital HREFLANG Tags Lite.This issue affects HREFLANG Tags Lite: from n/a... |
| CVE-2022-31021 | MEDIUM | 5.3 | 0.4% | Jan 16, 2024 | Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is ... |
| CVE-2022-3899 | HIGH | 8.1 | 0.4% | Jan 16, 2024 | The 3dprint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File M... |
| CVE-2022-3836 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high ... |
| CVE-2022-3829 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could a... |
| CVE-2022-3764 | HIGH | 7.2 | 1.0% | Jan 16, 2024 | The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. |
| CVE-2022-3739 | MEDIUM | 5.4 | 0.7% | Jan 16, 2024 | The WP Best Quiz WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with... |
| CVE-2022-3604 | HIGH | 7.8 | 0.4% | Jan 16, 2024 | The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could... |
| CVE-2022-3194 | MEDIUM | 5.4 | 0.5% | Jan 16, 2024 | The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allo... |
| CVE-2022-2413 | MEDIUM | 5.4 | 0.5% | Jan 16, 2024 | The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting... |
| CVE-2022-23180 | MEDIUM | 4.3 | 0.5% | Jan 16, 2024 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks... |
| CVE-2022-23179 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields bef... |
| CVE-2022-1760 | MEDIUM | 4.3 | 0.3% | Jan 16, 2024 | The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which coul... |
| CVE-2022-1618 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lackin... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now