2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4469 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4465 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4464 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | Themify Portfolio Post WordPress plugin before 1.2.1 does not validate and escapes some of its shortcode attributes befo... |
| CVE-2022-4460 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Sidebar Widgets by CodeLights WordPress plugin through 1.4 does not validate and escape some of its shortcode attrib... |
| CVE-2022-4453 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outp... |
| CVE-2022-4451 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Social Sharing WordPress plugin before 3.3.45 does not validate and escape some of its shortcode attributes before o... |
| CVE-2022-4449 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The Page scroll to id WordPress plugin before 1.7.6 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4442 | MEDIUM | 4.8 | 0.5% | Jan 16, 2023 | The Custom Post Types and Custom Fields creator WordPress plugin before 2.3.3 does not sanitize and escape some of its s... |
| CVE-2022-4431 | MEDIUM | 5.4 | 0.5% | Jan 16, 2023 | The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputtin... |
| CVE-2022-4330 | MEDIUM | 4.8 | 0.5% | Jan 16, 2023 | The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow hi... |
| CVE-2022-4320 | MEDIUM | 6.1 | 0.9% | Jan 16, 2023 | The WordPress Events Calendar WordPress plugin before 1.4.5 does not sanitize and escapes a parameter before outputting ... |
| CVE-2022-4299 | MEDIUM | 4.8 | 0.5% | Jan 16, 2023 | The Metricool WordPress plugin before 1.18 does not sanitise and escape some of its settings, which could allow high pri... |
| CVE-2022-4295 | MEDIUM | 6.1 | 0.9% | Jan 16, 2023 | The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back i... |
| CVE-2022-4199 | MEDIUM | 4.8 | 0.5% | Jan 16, 2023 | The Link Library WordPress plugin before 7.4.1 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2022-3904 | MEDIUM | 6.1 | 1.3% | Jan 16, 2023 | The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section... |
| CVE-2022-2658 | MEDIUM | 4.8 | 0.5% | Jan 16, 2023 | The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users su... |
| CVE-2022-45438 | MEDIUM | 5.3 | 1.2% | Jan 16, 2023 | When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticat... |
| CVE-2022-43721 | MEDIUM | 5.4 | 1.0% | Jan 16, 2023 | An authenticated attacker with update datasets permission could change a dataset link to an untrusted site, users could ... |
| CVE-2022-43720 | MEDIUM | 5.4 | 1.2% | Jan 16, 2023 | An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not ... |
| CVE-2022-43718 | MEDIUM | 5.4 | 1.3% | Jan 16, 2023 | Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by aut... |
| CVE-2022-43717 | MEDIUM | 5.4 | 1.2% | Jan 16, 2023 | Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vec... |
| CVE-2022-41703 | MEDIUM | 5.4 | 1.2% | Jan 16, 2023 | A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a speci... |
| CVE-2022-2815 | MEDIUM | 6.5 | 0.6% | Jan 14, 2023 | Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. |
| CVE-2022-38467 | MEDIUM | 6.1 | 0.8% | Jan 14, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver. |
| CVE-2022-41956 | MEDIUM | 6.5 | 1.8% | Jan 14, 2023 | Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that en... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now