2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3411 | MEDIUM | 6.5 | 1.2% | Feb 13, 2023 | A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8... |
| CVE-2022-47034 | CRITICAL | 9.8 | 0.8% | Feb 13, 2023 | A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass aut... |
| CVE-2022-4905 | MEDIUM | 6.1 | 0.7% | Feb 13, 2023 | A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vu... |
| CVE-2022-45962 | MEDIUM | 6.5 | 0.9% | Feb 13, 2023 | Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via Calendar... |
| CVE-2022-48110 | MEDIUM | 6.1 | 2.1% | Feb 13, 2023 | CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CK... |
| CVE-2022-45285 | MEDIUM | 6.1 | 0.5% | Feb 13, 2023 | Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-48077 | HIGH | 7.8 | 0.3% | Feb 13, 2023 | Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate priv... |
| CVE-2022-41134 | HIGH | 8.8 | 0.3% | Feb 13, 2023 | Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plu... |
| CVE-2022-3089 | CRITICAL | 9.8 | 0.3% | Feb 13, 2023 | Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could allow an attacker... |
| CVE-2022-4830 | MEDIUM | 5.4 | 65.0% | Feb 13, 2023 | The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes bef... |
| CVE-2022-4783 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Youtube Channel Gallery WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes b... |
| CVE-2022-4759 | MEDIUM | 5.4 | 0.7% | Feb 13, 2023 | The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputt... |
| CVE-2022-4745 | HIGH | 7.1 | 0.3% | Feb 13, 2023 | The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod,... |
| CVE-2022-4682 | MEDIUM | 5.4 | 0.7% | Feb 13, 2023 | The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before ... |
| CVE-2022-4678 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes be... |
| CVE-2022-4656 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortc... |
| CVE-2022-4628 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attribut... |
| CVE-2022-4580 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Twenty20 Image Before-After WordPress plugin through 1.5.9 does not validate and escape some of its shortcode attrib... |
| CVE-2022-4562 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Meks Flexible Shortcodes WordPress plugin before 1.3.5 does not validate and escape some of its shortcode attributes... |
| CVE-2022-4551 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Rich Table of Contents WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes b... |
| CVE-2022-4546 | HIGH | 7.2 | 1.0% | Feb 13, 2023 | The Mapwiz WordPress plugin through 1.0.1 does not properly sanitise and escape a parameter before using it in a SQL sta... |
| CVE-2022-4512 | MEDIUM | 5.4 | 0.8% | Feb 13, 2023 | The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes befo... |
| CVE-2022-4488 | MEDIUM | 5.4 | 0.7% | Feb 13, 2023 | The Widgets on Pages WordPress plugin before 1.8.0 does not validate and escape its shortcode attributes before outputti... |
| CVE-2022-4473 | MEDIUM | 5.4 | 0.5% | Feb 13, 2023 | The Widget Shortcode WordPress plugin through 0.3.5 does not validate and escape some of its shortcode attributes before... |
| CVE-2022-4471 | MEDIUM | 5.4 | 0.7% | Feb 13, 2023 | The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now