2022 CVE Vulnerabilities
27,562 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41839 | MEDIUM | 5.3 | 0.5% | Nov 18, 2022 | Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of ... |
| CVE-2022-41788 | MEDIUM | 5.4 | 0.4% | Nov 18, 2022 | Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress. |
| CVE-2022-41655 | MEDIUM | 6.5 | 0.6% | Nov 18, 2022 | Auth. (subscriber+) Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin <= 3.7.1 on WordPress. |
| CVE-2022-41643 | MEDIUM | 4.8 | 0.4% | Nov 18, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Accessibility plugin <= 1.0.3 on WordPress. |
| CVE-2022-41618 | MEDIUM | 5.3 | 0.5% | Nov 18, 2022 | Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress. |
| CVE-2022-41615 | MEDIUM | 6.1 | 0.2% | Nov 18, 2022 | Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Store Locator plugin <= 1.4.5 on WordP... |
| CVE-2022-41135 | MEDIUM | 5.3 | 0.5% | Nov 18, 2022 | Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress. |
| CVE-2022-40963 | MEDIUM | 5.4 | 0.4% | Nov 18, 2022 | Multiple Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerabilities in WP Page Builder plugin <= 1.2.6 on WordPre... |
| CVE-2022-40698 | MEDIUM | 6.1 | 0.4% | Nov 18, 2022 | Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress. |
| CVE-2022-40216 | MEDIUM | 6.5 | 0.4% | Nov 18, 2022 | Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69 on WordPress. |
| CVE-2022-44641 | MEDIUM | 6.5 | 1.0% | Nov 18, 2022 | In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRP... |
| CVE-2022-43673 | MEDIUM | 4.7 | 0.3% | Nov 18, 2022 | Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for ... |
| CVE-2022-43463 | MEDIUM | 4.8 | 0.4% | Nov 18, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on... |
| CVE-2022-41805 | MEDIUM | 4.3 | 0.2% | Nov 18, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress. |
| CVE-2022-38974 | MEDIUM | 4.3 | 0.5% | Nov 18, 2022 | Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with sub... |
| CVE-2022-38075 | MEDIUM | 6.1 | 0.2% | Nov 18, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin... |
| CVE-2022-45473 | MEDIUM | 5.5 | 0.3% | Nov 18, 2022 | In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666. |
| CVE-2022-24038 | MEDIUM | 6.5 | 0.6% | Nov 18, 2022 | Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated ... |
| CVE-2022-24939 | MEDIUM | 6.5 | 0.3% | Nov 18, 2022 | A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This ca... |
| CVE-2022-45375 | MEDIUM | 5.4 | 0.4% | Nov 17, 2022 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in iFeature Slider plugin <= 1.2 on WordPress. |
| CVE-2022-44736 | MEDIUM | 4.8 | 0.4% | Nov 17, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress. |
| CVE-2022-44591 | MEDIUM | 4.8 | 0.4% | Nov 17, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anthologize plugin <= 0.8.0 on WordPress. |
| CVE-2022-43332 | MEDIUM | 6.1 | 0.6% | Nov 17, 2022 | A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML... |
| CVE-2022-43171 | MEDIUM | 6.5 | 0.7% | Nov 17, 2022 | A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows att... |
| CVE-2022-43096 | MEDIUM | 6.8 | 0.5% | Nov 17, 2022 | Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now