2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1577 | MEDIUM | 5.4 | 0.4% | Jun 8, 2022 | The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backu... |
| CVE-2022-1570 | MEDIUM | 6.5 | 0.4% | Jun 8, 2022 | The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its set... |
| CVE-2022-1569 | MEDIUM | 4.8 | 0.6% | Jun 8, 2022 | The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! Wor... |
| CVE-2022-1541 | MEDIUM | 4.8 | 0.6% | Jun 8, 2022 | The Video Slider WordPress plugin before 1.4.8 does not sanitize or escape some of its video settings, which could allow... |
| CVE-2022-1506 | MEDIUM | 5.4 | 0.6% | Jun 8, 2022 | The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users... |
| CVE-2022-1469 | MEDIUM | 4.8 | 0.6% | Jun 8, 2022 | The FiboSearch WordPress plugin before 1.17.0 does not sanitise and escape some of its settings, which could allow high ... |
| CVE-2022-1424 | MEDIUM | 6.5 | 0.5% | Jun 8, 2022 | The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker t... |
| CVE-2022-1422 | MEDIUM | 6.5 | 0.5% | Jun 8, 2022 | The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an ... |
| CVE-2022-1421 | MEDIUM | 4.3 | 1.2% | Jun 8, 2022 | The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in ad... |
| CVE-2022-1394 | MEDIUM | 4.8 | 1.0% | Jun 8, 2022 | The Photo Gallery by 10Web WordPress plugin before 1.6.4 does not properly validate and escape some of its settings, whi... |
| CVE-2022-1241 | MEDIUM | 6.1 | 0.8% | Jun 8, 2022 | The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile ... |
| CVE-2022-1005 | MEDIUM | 6.1 | 0.9% | Jun 8, 2022 | The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back i... |
| CVE-2022-0779 | MEDIUM | 6.5 | 2.2% | Jun 8, 2022 | The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX a... |
| CVE-2022-31470 | MEDIUM | 6.1 | 52.1% | Jun 7, 2022 | An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12... |
| CVE-2022-30466 | MEDIUM | 6.5 | 0.7% | Jun 7, 2022 | joyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture-replay. |
| CVE-2022-29620 | MEDIUM | 6.5 | 1.7% | Jun 7, 2022 | FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOT... |
| CVE-2022-2022 | MEDIUM | 5.4 | 0.8% | Jun 7, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7. |
| CVE-2022-30748 | MEDIUM | 5.5 | 0.2% | Jun 7, 2022 | Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity. |
| CVE-2022-30747 | MEDIUM | 5.5 | 0.2% | Jun 7, 2022 | PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without ... |
| CVE-2022-30745 | MEDIUM | 5.5 | 0.2% | Jun 7, 2022 | Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files ... |
| CVE-2022-30743 | MEDIUM | 5.3 | 0.4% | Jun 7, 2022 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of co... |
| CVE-2022-30740 | MEDIUM | 4.3 | 0.2% | Jun 7, 2022 | Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored cr... |
| CVE-2022-30739 | MEDIUM | 4.3 | 0.4% | Jun 7, 2022 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email ... |
| CVE-2022-30738 | MEDIUM | 4.3 | 0.5% | Jun 7, 2022 | Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing scri... |
| CVE-2022-30737 | MEDIUM | 5.3 | 0.5% | Jun 7, 2022 | Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now