2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3935 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any... |
| CVE-2022-3934 | MEDIUM | 5.4 | 0.9% | Dec 12, 2022 | The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pa... |
| CVE-2022-3933 | MEDIUM | 5.4 | 0.9% | Dec 12, 2022 | The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow... |
| CVE-2022-3930 | MEDIUM | 6.5 | 0.6% | Dec 12, 2022 | The Directorist WordPress plugin before 7.4.2.2 suffers from an IDOR vulnerability which an attacker can exploit to chan... |
| CVE-2022-3925 | HIGH | 7.2 | 1.0% | Dec 12, 2022 | The buddybadges WordPress plugin through 1.0.0 does not sanitise and escape a parameter before using it in a SQL stateme... |
| CVE-2022-3921 | CRITICAL | 9.8 | 21.2% | Dec 12, 2022 | The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthe... |
| CVE-2022-3919 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users s... |
| CVE-2022-3915 | CRITICAL | 9.8 | 1.1% | Dec 12, 2022 | The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL state... |
| CVE-2022-3912 | HIGH | 7.5 | 0.7% | Dec 12, 2022 | The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX ac... |
| CVE-2022-3908 | MEDIUM | 6.1 | 0.9% | Dec 12, 2022 | The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the p... |
| CVE-2022-3906 | MEDIUM | 4.8 | 0.4% | Dec 12, 2022 | The Easy Form Builder WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow... |
| CVE-2022-3900 | CRITICAL | 9.8 | 19.0% | Dec 12, 2022 | The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before u... |
| CVE-2022-3883 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 7.24 does not... |
| CVE-2022-3882 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin WordPress plugin before 2.46 does not ... |
| CVE-2022-3881 | MEDIUM | 5.7 | 0.4% | Dec 12, 2022 | The WP Tools Increase Maximum Limits, Repair, Server PHP Info, Javascript errors, File Permissions, Transients, Error Lo... |
| CVE-2022-3880 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4... |
| CVE-2022-3879 | MEDIUM | 6.5 | 0.3% | Dec 12, 2022 | The Car Dealer (Dealership) and Vehicle sales WordPress Plugin WordPress plugin before 3.05 does not have proper authori... |
| CVE-2022-3862 | MEDIUM | 4.8 | 0.5% | Dec 12, 2022 | The Livemesh Addons for Elementor WordPress plugin before 7.2.4 does not sanitise and escape some of its settings, which... |
| CVE-2022-3853 | MEDIUM | 5.4 | 0.2% | Dec 12, 2022 | Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a w... |
| CVE-2022-3609 | MEDIUM | 4.8 | 0.4% | Dec 12, 2022 | The GetYourGuide Ticketing WordPress plugin before 1.0.4 does not sanitise and escape some parameters, which could allow... |
| CVE-2022-3605 | HIGH | 7.8 | 0.4% | Dec 12, 2022 | The WP CSV Exporter WordPress plugin before 1.3.7 does not properly escape the fields when exporting data as CSV, leadin... |
| CVE-2022-3359 | HIGH | 8.8 | 0.7% | Dec 12, 2022 | The Shortcodes and extra features for Phlox theme WordPress plugin before 2.10.7 unserializes the content of an imported... |
| CVE-2022-45997 | HIGH | 7.2 | 0.9% | Dec 12, 2022 | Tenda W20E V16.01.0.6(3392) is vulnerable to Buffer Overflow. |
| CVE-2022-45996 | HIGH | 7.2 | 2.3% | Dec 12, 2022 | Tenda W20E V16.01.0.6(3392) is vulnerable to Command injection via cmd_get_ping_output. |
| CVE-2022-45119 | — | — | — | Dec 12, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now