2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-50968 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The date_create... |
| CVE-2022-50967 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module. The date_created... |
| CVE-2022-50966 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The date_created, d... |
| CVE-2022-50965 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module. The date_created, ... |
| CVE-2022-50964 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module... |
| CVE-2022-50963 | MEDIUM | 6.1 | 0.2% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active modul... |
| CVE-2022-50962 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module. The date_create... |
| CVE-2022-50961 | MEDIUM | 6.4 | 0.2% | May 10, 2026 | WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows aut... |
| CVE-2022-50960 | MEDIUM | 6.1 | 0.2% | May 10, 2026 | WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnera... |
| CVE-2022-50959 | MEDIUM | 6.1 | 0.2% | May 10, 2026 | WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated... |
| CVE-2022-50958 | MEDIUM | 6.1 | 0.2% | May 10, 2026 | WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacke... |
| CVE-2022-50957 | MEDIUM | 6.1 | 0.2% | May 10, 2026 | Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated... |
| CVE-2022-50956 | MEDIUM | 6.9 | 0.2% | May 10, 2026 | WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attac... |
| CVE-2022-50955 | MEDIUM | 5.3 | 0.1% | May 10, 2026 | WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or ... |
| CVE-2022-50954 | MEDIUM | 6.9 | 0.4% | May 10, 2026 | WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated att... |
| CVE-2022-50949 | MEDIUM | 6.4 | 0.2% | May 10, 2026 | WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated at... |
| CVE-2022-50948 | MEDIUM | 6.4 | 0.2% | May 10, 2026 | Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attack... |
| CVE-2022-50947 | MEDIUM | 6.4 | 0.2% | May 10, 2026 | WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows ... |
| CVE-2022-50946 | MEDIUM | 6.4 | 0.2% | May 10, 2026 | WordPress Plugin Netroics Blog Posts Grid 1.0 contains a stored cross-site scripting vulnerability that allows authentic... |
| CVE-2022-50945 | MEDIUM | 6.4 | 0.2% | May 10, 2026 | WordPress 3dady Real-Time Web Stats plugin 1.0 contains a stored cross-site scripting vulnerability that allows authenti... |
| CVE-2022-50943 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious s... |
| CVE-2022-45899 | MEDIUM | 6.5 | 0.8% | May 8, 2026 | Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as... |
| CVE-2022-26523 | MEDIUM | 5.3 | 0.3% | May 8, 2026 | The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local ... |
| CVE-2022-23961 | MEDIUM | 6.1 | 0.2% | May 8, 2026 | In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS. This vulnerability... |
| CVE-2022-41650 | MEDIUM | 6.5 | 0.3% | Feb 17, 2026 | Missing Authorization vulnerability in Paul Custom Content by Country (by Shield Security) custom-content-by-country.Thi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now