2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2552 | MEDIUM | 5.3 | 8.4% | Aug 22, 2022 | The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information a... |
| CVE-2022-2532 | MEDIUM | 6.1 | 0.6% | Aug 22, 2022 | The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in... |
| CVE-2022-2407 | MEDIUM | 4.8 | 0.6% | Aug 22, 2022 | The WP phpMyAdmin WordPress plugin before 5.2.0.4 does not escape some of its settings, which could allow high privilege... |
| CVE-2022-2392 | MEDIUM | 6.5 | 0.9% | Aug 22, 2022 | The Lana Downloads Manager WordPress plugin before 1.8.0 is affected by an arbitrary file download vulnerability that ca... |
| CVE-2022-2389 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami Wor... |
| CVE-2022-2388 | MEDIUM | 6.5 | 0.4% | Aug 22, 2022 | The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, w... |
| CVE-2022-2383 | MEDIUM | 6.1 | 4.9% | Aug 22, 2022 | The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in... |
| CVE-2022-2382 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some o... |
| CVE-2022-2377 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The Directorist WordPress plugin before 7.3.0 does not have authorisation and CSRF checks in an AJAX action, allowing an... |
| CVE-2022-2375 | MEDIUM | 5.4 | 0.3% | Aug 22, 2022 | The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings,... |
| CVE-2022-2361 | MEDIUM | 4.8 | 0.5% | Aug 22, 2022 | The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow hi... |
| CVE-2022-2312 | MEDIUM | 5.4 | 0.3% | Aug 22, 2022 | The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing a... |
| CVE-2022-2276 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow... |
| CVE-2022-2275 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make... |
| CVE-2022-2198 | MEDIUM | 4.3 | 0.6% | Aug 22, 2022 | The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check author... |
| CVE-2022-2172 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logge... |
| CVE-2022-25810 | MEDIUM | 6.5 | 0.9% | Aug 22, 2022 | The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_re... |
| CVE-2022-1932 | MEDIUM | 6.1 | 0.5% | Aug 22, 2022 | The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting th... |
| CVE-2022-1322 | MEDIUM | 4.8 | 0.5% | Aug 22, 2022 | The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, w... |
| CVE-2022-1251 | MEDIUM | 4.3 | 0.3% | Aug 22, 2022 | The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile ... |
| CVE-2022-0446 | MEDIUM | 4.8 | 0.4% | Aug 22, 2022 | The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing h... |
| CVE-2022-2932 | MEDIUM | 6.1 | 0.7% | Aug 22, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2. |
| CVE-2022-2890 | MEDIUM | 5.4 | 0.7% | Aug 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-1340 | MEDIUM | 5.4 | 0.4% | Aug 22, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-36251 | MEDIUM | 6.1 | 0.5% | Aug 22, 2022 | Clinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients.php. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now