2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4673 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Rate my Post WordPress plugin before 3.3.9 does not validate and escape one of its shortcode attributes, which could... |
| CVE-2022-4672 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attr... |
| CVE-2022-4668 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes befor... |
| CVE-2022-4650 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allo... |
| CVE-2022-4629 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attr... |
| CVE-2022-4627 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The ShiftNav WordPress plugin before 1.7.2 does not validate and escape some of its shortcode attributes before outputti... |
| CVE-2022-4625 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4624 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4576 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Easy Bootstrap Shortcode WordPress plugin through 4.5.4 does not validate and escape some of its shortcode attribute... |
| CVE-2022-4570 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting the... |
| CVE-2022-4548 | MEDIUM | 6.5 | 0.3% | Jan 23, 2023 | The Optimize images ALT Text & names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place wh... |
| CVE-2022-4545 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Sitemap WordPress plugin before 4.4 does not validate and escape some of its shortcode attributes before outputting ... |
| CVE-2022-4542 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes ... |
| CVE-2022-4509 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before... |
| CVE-2022-4485 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Page-list WordPress plugin before 5.3 does not validate and escape some of its shortcode attributes before outputtin... |
| CVE-2022-4475 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before ... |
| CVE-2022-4474 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Easy Social Feed WordPress plugin before 6.4.0 does not validate and escape some of its shortcode attributes before ... |
| CVE-2022-4467 | MEDIUM | 5.4 | 0.5% | Jan 23, 2023 | The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before ... |
| CVE-2022-4443 | MEDIUM | 6.5 | 0.3% | Jan 23, 2023 | The BruteBank WordPress plugin before 1.9 does not have CSRF check in place when updating its settings, which could allo... |
| CVE-2022-4346 | MEDIUM | 5.3 | 0.7% | Jan 23, 2023 | The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used ... |
| CVE-2022-4307 | MEDIUM | 6.1 | 0.5% | Jan 23, 2023 | The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenti... |
| CVE-2022-41505 | MEDIUM | 6.4 | 0.4% | Jan 23, 2023 | An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by c... |
| CVE-2022-3811 | MEDIUM | 4.8 | 0.5% | Jan 23, 2023 | The EU Cookie Law for GDPR/CCPA WordPress plugin through 3.1.6 does not sanitise and escape some of its settings, which ... |
| CVE-2022-46959 | MEDIUM | 4.3 | 0.8% | Jan 23, 2023 | An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal. |
| CVE-2022-48281 | MEDIUM | 5.5 | 0.5% | Jan 23, 2023 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of siz... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now