2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-4746HIGH7.5The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over P...
CVE-2022-4718MEDIUM5.4The Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes b...
CVE-2022-4716MEDIUM5.4The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outpu...
CVE-2022-4715MEDIUM5.4The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes befor...
CVE-2022-4706MEDIUM5.4The Genesis Columns Advanced WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes...
CVE-2022-4693CRITICAL9.8The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass au...
CVE-2022-4675MEDIUM5.4The Mongoose Page Plugin WordPress plugin before 1.9.0 does not validate and escape one of its shortcode attributes, whi...
CVE-2022-4673MEDIUM5.4The Rate my Post WordPress plugin before 3.3.9 does not validate and escape one of its shortcode attributes, which could...
CVE-2022-4672MEDIUM5.4The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attr...
CVE-2022-4668MEDIUM5.4The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes befor...
CVE-2022-4650MEDIUM5.4The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allo...
CVE-2022-4629MEDIUM5.4The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attr...
CVE-2022-4627MEDIUM5.4The ShiftNav WordPress plugin before 1.7.2 does not validate and escape some of its shortcode attributes before outputti...
CVE-2022-4625MEDIUM5.4The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before...
CVE-2022-4624MEDIUM5.4The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before ou...
CVE-2022-4576MEDIUM5.4The Easy Bootstrap Shortcode WordPress plugin through 4.5.4 does not validate and escape some of its shortcode attribute...
CVE-2022-4570MEDIUM5.4The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting the...
CVE-2022-4548MEDIUM6.5The Optimize images ALT Text & names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place wh...
CVE-2022-4545MEDIUM5.4The Sitemap WordPress plugin before 4.4 does not validate and escape some of its shortcode attributes before outputting ...
CVE-2022-4542MEDIUM5.4The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes ...
CVE-2022-4509MEDIUM5.4The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before...
CVE-2022-4485MEDIUM5.4The Page-list WordPress plugin before 5.3 does not validate and escape some of its shortcode attributes before outputtin...
CVE-2022-4475MEDIUM5.4The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before ...
CVE-2022-4474MEDIUM5.4The Easy Social Feed WordPress plugin before 6.4.0 does not validate and escape some of its shortcode attributes before ...
CVE-2022-4467MEDIUM5.4The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now