# CVEs published 2022-07-23

4 CVEs were published on July 23, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2016-15004](https://cve.now/CVE-2016-15004.md): InfiniteWP Client Plugin injection (CVSS 7.3, InfiniteWP Client Plugin)
- [CVE-2022-36414](https://cve.now/CVE-2022-36414.md): There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before (no CVSS)
- [CVE-2022-36415](https://cve.now/CVE-2022-36415.md): A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE (no CVSS)
- [CVE-2018-25045](https://cve.now/CVE-2018-25045.md): Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoe (no CVSS, django-rest-framework)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.