2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4792 | MEDIUM | 5.4 | 0.4% | Jan 30, 2023 | The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, ... |
| CVE-2022-4787 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | Themify Shortcodes WordPress plugin before 2.0.8 does not validate and escape one of its shortcode attributes, which cou... |
| CVE-2022-4781 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, wh... |
| CVE-2022-4776 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The CC Child Pages WordPress plugin before 1.43 does not validate and escape some of its shortcode attributes before out... |
| CVE-2022-4765 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes ... |
| CVE-2022-4763 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Icon Widget WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outpu... |
| CVE-2022-4749 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attri... |
| CVE-2022-4699 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before ... |
| CVE-2022-4680 | HIGH | 7.2 | 1.0% | Jan 30, 2023 | The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow... |
| CVE-2022-4671 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputti... |
| CVE-2022-4667 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before... |
| CVE-2022-4654 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attr... |
| CVE-2022-4651 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Justified Gallery WordPress plugin before 1.7.1 does not validate and escape one of its shortcode attributes, which ... |
| CVE-2022-4649 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which... |
| CVE-2022-4553 | MEDIUM | 4.3 | 0.3% | Jan 30, 2023 | The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow a... |
| CVE-2022-4552 | MEDIUM | 6.1 | 0.3% | Jan 30, 2023 | The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing saniti... |
| CVE-2022-4496 | MEDIUM | 6.1 | 0.6% | Jan 30, 2023 | The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 be... |
| CVE-2022-4472 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before ou... |
| CVE-2022-4470 | MEDIUM | 5.4 | 0.5% | Jan 30, 2023 | The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes... |
| CVE-2022-4395 | CRITICAL | 9.8 | 17.6% | Jan 30, 2023 | The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthe... |
| CVE-2022-4306 | MEDIUM | 5.4 | 0.8% | Jan 30, 2023 | The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting ... |
| CVE-2022-26872 | HIGH | 8.8 | 0.8% | Jan 30, 2023 | AMI Megarac Password reset interception via API |
| CVE-2022-23334 | CRITICAL | 9.8 | 0.5% | Jan 30, 2023 | The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries... |
| CVE-2022-46087 | MEDIUM | 5.4 | 0.6% | Jan 30, 2023 | CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin use... |
| CVE-2022-45788 | CRITICAL | 9.8 | 1.2% | Jan 30, 2023 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code exe... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now