2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4035 | MEDIUM | 6.1 | 0.7% | Nov 29, 2022 | The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field par... |
| CVE-2022-4033 | MEDIUM | 5.3 | 0.7% | Nov 29, 2022 | The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' paramete... |
| CVE-2022-4032 | MEDIUM | 6.1 | 0.7% | Nov 29, 2022 | The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in ve... |
| CVE-2022-4031 | MEDIUM | 4.9 | 0.7% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.... |
| CVE-2022-4029 | MEDIUM | 4.7 | 0.6% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the W... |
| CVE-2022-4028 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipula... |
| CVE-2022-4027 | MEDIUM | 5.4 | 0.6% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipula... |
| CVE-2022-3995 | MEDIUM | 4.3 | 0.6% | Nov 29, 2022 | The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, ... |
| CVE-2022-3991 | MEDIUM | 5.4 | 0.6% | Nov 29, 2022 | The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters sav... |
| CVE-2022-3898 | MEDIUM | 6.5 | 0.4% | Nov 29, 2022 | The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ... |
| CVE-2022-3897 | MEDIUM | 4.8 | 0.5% | Nov 29, 2022 | The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in ve... |
| CVE-2022-3896 | MEDIUM | 6.1 | 0.6% | Nov 29, 2022 | The WP Affiliate Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER["REQUEST_URI... |
| CVE-2022-3747 | MEDIUM | 6.5 | 0.8% | Nov 29, 2022 | The Becustom plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5.2.... |
| CVE-2022-3361 | MEDIUM | 4.3 | 2.5% | Nov 29, 2022 | The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due... |
| CVE-2022-44279 | MEDIUM | 6.1 | 0.6% | Nov 29, 2022 | Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php. |
| CVE-2022-4172 | MEDIUM | 6.5 | 0.4% | Nov 29, 2022 | An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of ... |
| CVE-2022-4144 | MEDIUM | 6.5 | 0.3% | Nov 29, 2022 | An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not ... |
| CVE-2022-46150 | MEDIUM | 4.3 | 0.5% | Nov 29, 2022 | Discourse is an open-source discussion platform. Prior to version 2.8.13 of the `stable` branch and version 2.9.0.beta14... |
| CVE-2022-46148 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the `stable` branch and versions 2.9.0.b... |
| CVE-2022-44355 | MEDIUM | 6.1 | 1.6% | Nov 29, 2022 | SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php. |
| CVE-2022-36433 | MEDIUM | 6.1 | 0.6% | Nov 29, 2022 | The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript c... |
| CVE-2022-45204 | MEDIUM | 5.5 | 0.3% | Nov 29, 2022 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedi... |
| CVE-2022-42100 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply... |
| CVE-2022-42099 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subje... |
| CVE-2022-41676 | MEDIUM | 5.4 | 0.4% | Nov 29, 2022 | Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general us... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now