2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41861 | MEDIUM | 6.5 | 1.1% | Jan 17, 2023 | A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which ca... |
| CVE-2022-2893 | MEDIUM | 6.5 | 0.7% | Jan 17, 2023 | RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to s... |
| CVE-2022-42462 | MEDIUM | 4.8 | 0.4% | Jan 17, 2023 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin <= 5.00 versions. |
| CVE-2022-45440 | MEDIUM | 4.4 | 0.2% | Jan 17, 2023 | A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbo... |
| CVE-2022-45439 | MEDIUM | 6.5 | 0.2% | Jan 17, 2023 | A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC... |
| CVE-2022-4658 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The RSSImport WordPress plugin through 4.6.1 does not validate and escape one of its shortcode attributes, which could a... |
| CVE-2022-4655 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, whic... |
| CVE-2022-4653 | MEDIUM | 5.4 | 0.4% | Jan 16, 2023 | The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could a... |
| CVE-2022-4648 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Real Testimonials WordPress plugin before 2.6.0 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4578 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attri... |
| CVE-2022-4571 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Seriously Simple Podcasting WordPress plugin before 2.19.1 does not validate and escape some of its shortcode attrib... |
| CVE-2022-4549 | MEDIUM | 4.3 | 0.3% | Jan 16, 2023 | The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could al... |
| CVE-2022-4544 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The MashShare WordPress plugin before 3.8.7 does not validate and escape some of its shortcode attributes before outputt... |
| CVE-2022-4508 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before outpu... |
| CVE-2022-4507 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Real Cookie Banner WordPress plugin before 3.4.10 does not validate and escapes some of its shortcode attributes bef... |
| CVE-2022-4487 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Easy Accordion WordPress plugin before 2.2.0 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4486 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Meteor Slides WordPress plugin before 1.5.7 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4484 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.44 does not validate and escape s... |
| CVE-2022-4483 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Insert Pages WordPress plugin before 3.7.5 does not validate and escape some of its shortcode attributes before outp... |
| CVE-2022-4482 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.5.3 does not validate and escape some of its shor... |
| CVE-2022-4481 | MEDIUM | 5.4 | 0.6% | Jan 16, 2023 | The Mesmerize Companion WordPress plugin before 1.6.135 does not validate and escape some of its shortcode attributes be... |
| CVE-2022-4480 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Click to Chat WordPress plugin before 3.18.1 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4478 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before out... |
| CVE-2022-4477 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Smash Balloon Social Post Feed WordPress plugin before 4.1.6 does not validate and escapes some of its shortcode att... |
| CVE-2022-4476 | MEDIUM | 5.4 | 0.6% | Jan 16, 2023 | The Download Manager WordPress plugin before 3.2.62 does not validate and escapes some of its shortcode attributes befor... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now