2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-4824MEDIUM5.4The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes befo...
CVE-2022-4762MEDIUM5.4The Materialis Companion WordPress plugin before 1.3.40 does not validate and escape some of its shortcode attributes be...
CVE-2022-4756MEDIUM5.4The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes befo...
CVE-2022-4747MEDIUM5.4The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shor...
CVE-2022-4717MEDIUM5.4The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes befo...
CVE-2022-4681CRITICAL9.8The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL ...
CVE-2022-4677MEDIUM5.4The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, whi...
CVE-2022-4674MEDIUM5.4The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could all...
CVE-2022-4670MEDIUM5.4The PDF.js Viewer WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before out...
CVE-2022-4664MEDIUM5.4The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outpu...
CVE-2022-4657MEDIUM5.4The Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before o...
CVE-2022-4626MEDIUM5.4The PPWP WordPress plugin before 1.8.6 does not validate and escape some of its shortcode attributes before outputting t...
CVE-2022-4577MEDIUM5.4The Easy Testimonials WordPress plugin before 3.9.3 does not validate and escape some of its shortcode attributes before...
CVE-2022-4489HIGH7.2The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privil...
CVE-2022-4459MEDIUM5.4The WP Show Posts WordPress plugin before 1.1.4 does not validate and escape some of its shortcode attributes before out...
CVE-2022-4384MEDIUM6.5The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) fr...
CVE-2022-4321MEDIUM6.1The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Refl...
CVE-2022-32663HIGH7.5In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of s...
CVE-2022-32656MEDIUM6.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala...
CVE-2022-32655MEDIUM6.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala...
CVE-2022-32654MEDIUM6.7In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala...
CVE-2022-32643MEDIUM6.4In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit...
CVE-2022-32642MEDIUM6.4In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege ...
CVE-2022-32595MEDIUM4.4In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informati...
CVE-2022-4902MEDIUM6.1A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now