2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36405 | MEDIUM | 5.4 | 0.4% | Aug 23, 2022 | Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in amCharts: Charts and Maps plugin <= 1.4 ... |
| CVE-2022-36394 | HIGH | 8.8 | 0.7% | Aug 23, 2022 | Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress. |
| CVE-2022-36389 | HIGH | 8.8 | 0.3% | Aug 23, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress. |
| CVE-2022-36379 | HIGH | 8.8 | 0.4% | Aug 23, 2022 | Cross-Site Request Forgery (CSRF) leading to plugin settings update in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 a... |
| CVE-2022-36347 | MEDIUM | 5.4 | 0.5% | Aug 23, 2022 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alpine Press Alpine PhotoTile for Pinterest pl... |
| CVE-2022-36341 | MEDIUM | 5.4 | 0.4% | Aug 23, 2022 | Authenticated (subscriber+) plugin settings change leading to Stored Cross-Site Scripting (XSS) vulnerability in Akash s... |
| CVE-2022-36292 | HIGH | 8.8 | 0.3% | Aug 23, 2022 | Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress. |
| CVE-2022-36288 | HIGH | 8.8 | 0.3% | Aug 23, 2022 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress. |
| CVE-2022-36285 | HIGH | 7.2 | 0.9% | Aug 23, 2022 | Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin <= 1.0.1 at... |
| CVE-2022-36282 | MEDIUM | 5.4 | 0.4% | Aug 23, 2022 | Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Roman Pronskiy's Search Exclude plugin <= 1.2... |
| CVE-2022-35726 | CRITICAL | 9.8 | 0.6% | Aug 23, 2022 | Broken Authentication vulnerability in yotuwp Video Gallery plugin <= 1.3.4.5 at WordPress. |
| CVE-2022-35242 | MEDIUM | 5.3 | 0.5% | Aug 23, 2022 | Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin <= 3.4.1 at... |
| CVE-2022-35235 | MEDIUM | 4.9 | 0.9% | Aug 23, 2022 | Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin <= 2.6 at WordPress. |
| CVE-2022-34868 | MEDIUM | 6.5 | 0.9% | Aug 23, 2022 | Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress. |
| CVE-2022-34658 | MEDIUM | 5.4 | 0.4% | Aug 23, 2022 | Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager ... |
| CVE-2022-34648 | MEDIUM | 5.4 | 0.4% | Aug 23, 2022 | Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO fi... |
| CVE-2022-33142 | MEDIUM | 6.5 | 0.9% | Aug 23, 2022 | Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin <= 1.9.10... |
| CVE-2022-2965 | MEDIUM | 4.3 | 0.6% | Aug 23, 2022 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7. |
| CVE-2022-29476 | MEDIUM | 6.1 | 0.4% | Aug 23, 2022 | Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in 8 Degree Themes otification Bar for WordPress plugin ... |
| CVE-2022-28883 | HIGH | 7.5 | 0.5% | Aug 23, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack functi... |
| CVE-2022-28882 | HIGH | 7.5 | 0.4% | Aug 23, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go i... |
| CVE-2022-35278 | MEDIUM | 6.1 | 1.4% | Aug 23, 2022 | In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a maliciou... |
| CVE-2022-37223 | CRITICAL | 9.8 | 0.8% | Aug 23, 2022 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list. |
| CVE-2022-37199 | CRITICAL | 9.8 | 0.8% | Aug 23, 2022 | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list. |
| CVE-2022-36261 | CRITICAL | 9.1 | 1.0% | Aug 23, 2022 | An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server w... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now