2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2426 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The Thinkific Uploader WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high ... |
| CVE-2022-2425 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The WP DS Blog Map WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow h... |
| CVE-2022-2424 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The Google Maps Anywhere WordPress plugin through 1.2.6.3 does not sanitise and escape any of its settings, which could ... |
| CVE-2022-2423 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The DW Promobar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2022-2412 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The Better Tag Cloud WordPress plugin through 0.99.5 does not sanitise and escape some of its settings, which could allo... |
| CVE-2022-2411 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow hi... |
| CVE-2022-2410 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2022-2409 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privile... |
| CVE-2022-2398 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-pr... |
| CVE-2022-2395 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The weForms WordPress plugin before 1.6.14 does not sanitise and escape its settings, allowing high privilege users such... |
| CVE-2022-2391 | MEDIUM | 5.4 | 0.5% | Aug 8, 2022 | The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as l... |
| CVE-2022-2386 | MEDIUM | 6.1 | 0.5% | Aug 8, 2022 | The Crowdsignal Dashboard WordPress plugin before 3.0.8 does not sanitise and escape a parameter before outputting it ba... |
| CVE-2022-2372 | MEDIUM | 4.8 | 0.5% | Aug 8, 2022 | The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high priv... |
| CVE-2022-2371 | MEDIUM | 5.4 | 0.5% | Aug 8, 2022 | The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users wi... |
| CVE-2022-2367 | HIGH | 7.5 | 1.0% | Aug 8, 2022 | The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, t... |
| CVE-2022-2357 | HIGH | 7.5 | 1.2% | Aug 8, 2022 | The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download... |
| CVE-2022-2356 | HIGH | 8.8 | 0.8% | Aug 8, 2022 | The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upl... |
| CVE-2022-2355 | MEDIUM | 6.5 | 0.3% | Aug 8, 2022 | The Easy Username Updater WordPress plugin before 1.0.5 does not implement CSRF checks, which could allow attackers to m... |
| CVE-2022-2269 | CRITICAL | 9.8 | 1.0% | Aug 8, 2022 | The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it i... |
| CVE-2022-2046 | MEDIUM | 4.9 | 0.8% | Aug 8, 2022 | The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor direc... |
| CVE-2022-1323 | MEDIUM | 6.5 | 0.6% | Aug 8, 2022 | The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_option... |
| CVE-2022-2708 | CRITICAL | 9.8 | 0.5% | Aug 8, 2022 | A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an un... |
| CVE-2022-2707 | CRITICAL | 9.8 | 0.6% | Aug 8, 2022 | A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected... |
| CVE-2022-2706 | CRITICAL | 9.8 | 0.6% | Aug 8, 2022 | A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Aff... |
| CVE-2022-2705 | CRITICAL | 9.8 | 0.6% | Aug 8, 2022 | A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now