CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- madewithfuel customize wordpress emails and alertsBetter Notifications for WP < 1.8.7 - Email Address Disclosure4.3 Medium
- simple-membership-plugin simple membershipSimple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF4.7 Medium
- wprssaggregator wp rss aggregator, unknown wp rss aggregator – news feeds, autoblogging, youtube video feeds and more +1 moreWP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- unknown wp accessibility helper (wah), wp accessibility helper project accessibility helper +1 moreWP Accessibility Helper (WAH) < 0.6.0.7 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- maxfoundry wp-paginateWP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown yoast seo, yoast seo +1 moreYoast SEO 16.7-17.2 - Unauthenticated Full Path Disclosure5.3 Medium
- i-plugins whmcs bridge, whmcs bridge bridge +1 moreWHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)6.1 Medium
- wpgooglemap wp google map, unknown maps plugin using google maps for wordpress – wp google map +1 moreWP Google Map < 1.8.4 - Arbitrary Post Deletion and Plugin's Settings Update via CSRF6.5 Medium
- codepress visitor statistics, osamaesh wp visitor statistics (real time traffic) +1 moreWP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS5.4 Medium
- wp user project user, unknown wp user – custom registration forms, login and user profile +1 moreWP User < 7.0 - Reflected Cross-Site Scripting6.1 Medium
- wpgooglemap wp google map, unknown maps plugin using google maps for wordpress – wp google map +1 moreWP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings Update5.7 Medium
- postsnippets post snippetsPost Snippets < 3.1.4 - CSRF to Stored Cross-Site Scripting9.6 Critical
- unknown migration, backup, staging – wpvivid backup and migration plugin, wpvivid migration\, backup\, staging +1 moreWPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- dineshkarki use any font, unknown use any font | custom font uploader +1 moreUse Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending6.1 Medium
- magnigenie wp responsive menuWP Responsive Menu < 3.1.7.1 - Subscriber+ Settings Update to Stored XSS5.4 Medium
- bootstrapped dynamic widgetsDynamic Widgets <= 1.5.16 - Reflected Cross-Site Scripting5.4 Medium
- statcounter, unknown statcounter – free real time visitor stats +1 moreStatCounter < 2.0.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- infornweb logo showcase with slick slider, unknown logo showcase with slick slider – logo carousel, logo slider & logo grid +1 moreLogo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRF4.3 Medium
- codeasily grand flagallery, unknown album and image gallery with lightbox – flagallery photo portfolio +1 moreGRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- securemoz security auditSecurity Audit <= 1.0.0 - Admin+ Stored Cross Site Scripting4.8 Medium
- editable-table project editable table, unknown editable table simple fast frontend from sql tables +1 moreEditableTable <= 0.1.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wp cloudy, weather plugin, wpscan wp cloudy +1 moreWP Cloudy < 4.4.9 - Admin+ SQL Injection8.8 High
- schiocco support boardSupport Board < 3.3.6 - Arbitrary File Deletion via CSRF8.1 High
- bold-themes cost calculatorCost Calculator <= 1.6 - Authenticated Local File Inclusion6.5 Medium
- core tweaks wp setup project tweaks wp setup, unknown core tweaks wp setup +1 moreCore Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF8.8 High
- infornweb logo showcase with slick slider, unknown logo showcase with slick slider – logo carousel, logo slider & logo grid +1 moreLogo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update4.3 Medium
- orange-form project orange-form, unknown orange form +1 moreOrange Form <= 1.0 - SQL Injection via CSRF8.8 High
- wpeverest contact form, unknown contact forms – drag & drop contact form builder +1 moreContact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read4.9 Medium
- unknown orange form, orange-form project orange-form +1 moreOrange Form <= 1.0.1 - Unauthenticated Arbitrary Post Deletion4.3 Medium
- codetipi 15zine15Zine < 3.3.0 - Reflected Cross-Site Scripting6.1 Medium
- ametysThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to...5.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps...4.8 Medium
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Stored in librenms/librenms4.7 Medium
KernelLinuxtipc: improve size validations for received domain recordsNo scoreKernelLinuxmoxart: fix potential use-after-free on remove pathNo scoreKernelLinuxext4: fix error handling in ext4_fc_record_modified_inode()No scoreKernelLinuxperf/x86/intel/pt: Fix crash with stop filters in single-range modeNo scoreKernelLinuxbpf: Use VM_MAP instead of VM_ALLOC for ringbufNo scoreKernelLinuxgve: fix the wrong AdminQ buffer queue index checkNo scoreKernelLinuxscsi: bnx2fc: Make bnx2fc_recv_frame() mp safeNo scoreKernelLinuxASoC: codecs: wcd938x: fix incorrect used of portidNo scoreKernelLinuxASoC: max9759: fix underflow in speaker_gain_control_put()No scoreKernelLinuxdrm: mxsfb: Fix NULL pointer dereferenceNo scoreKernelLinuxnet, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_workNo scoreKernelLinuxnet: macsec: Fix offload support for NETDEV_UNREGISTER eventNo scoreKernelLinuxnet/smc: Forward wakeup to smc socket waitqueue after fallbackNo scoreKernelLinuxnet: ieee802154: ca8210: Stop leaking skb'sNo scoreKernelLinuxspi: uniphier: fix reference count leak in uniphier_spi_probe()No scoreKernelLinuxiommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()No scoreKernelLinuxRDMA/siw: Fix refcounting leak in siw_create_qp()No score- Show moreLoading…