2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4371 | HIGH | 7.2 | 1.0% | Jan 2, 2023 | The Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQ... |
| CVE-2022-4370 | HIGH | 7.2 | 1.0% | Jan 2, 2023 | The multimedial images WordPress plugin through 1.0b does not properly sanitize and escape a parameter before using it i... |
| CVE-2022-4369 | MEDIUM | 6.1 | 0.5% | Jan 2, 2023 | The WP-Lister Lite for Amazon WordPress plugin before 2.4.4 does not sanitize and escapes a parameter before outputting ... |
| CVE-2022-4362 | MEDIUM | 5.4 | 0.6% | Jan 2, 2023 | The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could... |
| CVE-2022-4360 | HIGH | 7.2 | 1.1% | Jan 2, 2023 | The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it ... |
| CVE-2022-4359 | HIGH | 7.2 | 1.0% | Jan 2, 2023 | The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it ... |
| CVE-2022-4358 | HIGH | 7.2 | 1.0% | Jan 2, 2023 | The WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it ... |
| CVE-2022-4357 | CRITICAL | 9.8 | 1.0% | Jan 2, 2023 | The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL... |
| CVE-2022-4356 | HIGH | 7.2 | 0.9% | Jan 2, 2023 | The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL... |
| CVE-2022-4355 | HIGH | 7.2 | 0.9% | Jan 2, 2023 | The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL... |
| CVE-2022-4352 | HIGH | 7.2 | 1.0% | Jan 2, 2023 | The Qe SEO Handyman WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a ... |
| CVE-2022-4351 | HIGH | 7.2 | 1.1% | Jan 2, 2023 | The Qe SEO Handyman WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a ... |
| CVE-2022-4340 | MEDIUM | 5.3 | 0.7% | Jan 2, 2023 | The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in... |
| CVE-2022-4329 | MEDIUM | 6.1 | 0.5% | Jan 2, 2023 | The Product list Widget for Woocommerce WordPress plugin through 1.0 does not sanitise and escape a parameter before out... |
| CVE-2022-4324 | HIGH | 7.2 | 17.7% | Jan 2, 2023 | The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead t... |
| CVE-2022-4302 | HIGH | 7.2 | 17.7% | Jan 2, 2023 | The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow hig... |
| CVE-2022-4298 | CRITICAL | 9.8 | 1.8% | Jan 2, 2023 | The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user ... |
| CVE-2022-4297 | CRITICAL | 9.8 | 3.6% | Jan 2, 2023 | The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a ... |
| CVE-2022-4260 | MEDIUM | 4.8 | 0.9% | Jan 2, 2023 | The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high priv... |
| CVE-2022-4256 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, whi... |
| CVE-2022-4237 | HIGH | 8.8 | 1.1% | Jan 2, 2023 | The Welcart e-Commerce WordPress plugin before 2.8.6 does not validate user input before using it in file_exist() functi... |
| CVE-2022-4236 | MEDIUM | 6.5 | 0.8% | Jan 2, 2023 | The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content ... |
| CVE-2022-4200 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The Login with Cognito WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could all... |
| CVE-2022-4198 | MEDIUM | 4.8 | 0.6% | Jan 2, 2023 | The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow ... |
| CVE-2022-4142 | MEDIUM | 4.8 | 0.5% | Jan 2, 2023 | The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now