CVEs published May 30, 2022
27 CVEs were published on May 30, 2022: 0 critical, 0 high.
- Published
- 27
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- External Links in New Window / New Tab
- 2
- Amazon Link
- 1
- BannerMan
- 1
- Birthdays Widget
- 1
- Bulk Page Creator
- 1
- Call&Book Mobile Bar
- 1
- Change wp-admin login
- 1
- Content Mask
- 1
- Easy FAQ with Expanding Text
- 1
- Enable SVG
- 1
Medium, low and unrated 27
- CVE-2022-28799The TikTok application before 23.7.3 for Android allows account takeover.
- CVE-2022-1646Simple Real Estate Pack <= 1.4.8 - Admin+ Stored Cross Site ScriptingSimple Real Estate Pack
- CVE-2022-1645Amazon Link <= 3.2.10 - Admin+ Stored Cross-Site ScriptingAmazon Link
- CVE-2022-1644Call&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site ScriptingCall&Book Mobile Bar
- CVE-2022-1643Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site ScriptingBirthdays Widget
- CVE-2022-1611Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRFBulk Page Creator
- CVE-2022-1589Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings UpdateChange wp-admin login
- CVE-2022-1583External Links in New Window / New Tab < 1.43 - TabnabbingExternal Links in New Window / New Tab
- CVE-2022-1582External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site ScriptingExternal Links in New Window / New Tab
- CVE-2022-1568Team Members < 5.1.1 - Admin+ Stored Cross-Site ScriptingTeam Members
- CVE-2022-1566Quotes llama < 1.0.0 - Admin+ Stored Cross-Site ScriptingQuotes llama
- CVE-2022-1564Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site ScriptingForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2022-1562Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVGEnable SVG
- CVE-2022-1556StaffList < 3.1.5 - Admin+ SQLiStaffList
- CVE-2022-1542HPB Dashboard <= 1.3.1 - Admin+ Stored Cross Site Scriptinghpb Dashboard
- CVE-2022-1528VikBooking < 1.5.9 - Reflected Cross-Site ScriptingVikBooking Hotel Booking Engine & PMS
- CVE-2022-1527WP 2FA < 2.2.1 - Reflected Cross-Site ScriptingWP 2FA – Two-factor authentication for WordPress
- CVE-2022-1456Poll Maker < 4.0.2 - Admin+ Stored Cross-Site ScriptingPoll Maker
- CVE-2022-1395Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site ScriptingEasy FAQ with Expanding Text
- CVE-2022-1387No Future Posts <= 1.4 - Admin+ Stored Cross-Site ScriptingNo Future Posts
- CVE-2022-1299Slideshow <= 2.3.1 - Admin+ Stored Cross-Site ScriptingSlideshow
- CVE-2022-1294IMDB info box <= 2.0 - Admin+ Stored Cross-Site ScriptingIMDB Info Box
- CVE-2022-1275BannerMan <= 0.2.4 - Multiple Admin+ Stored Cross-Site ScriptingBannerMan
- CVE-2022-1009Smush < 3.9.9 - Admin+ Reflected Cross-Site ScriptingSmush – Lazy Load Images, Optimize & Compress Images
- CVE-2022-0642JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRFJivoChat Live Chat – WP live chat plugin for WordPress
- CVE-2022-0376User Meta < 2.4.3 - Admin+ Stored Cross-Site ScriptingUser Meta – User Profile Builder and User management plugin
- CVE-2022-1203Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options UpdateContent Mask