CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
KernelLinuxASoC: SOF: sof-audio: prepare_widgets: Check swidget for NULL on sink failureNo scoreKernelLinuxnvmem: core: fix cleanup after dev_set_name()No scoreKernelLinuxovl: Use "buf" flexible array for memcpy() destinationNo scoreKernelLinuxf2fs: initialize locks earlier in f2fs_fill_super()No scoreKernelLinuxfbdev: smscufx: fix error handling code in ufx_usb_probeNo scoreKernelLinuxwifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds readsNo scoreKernelLinuxgfs2: Always check inode size of inline inodesNo scoreKernelLinuxbpf: Skip invalid kfunc call in backtrack_insnNo scoreKernelLinuxf2fs: fix to do sanity check on i_extra_isize in is_alive()No score- control by web x-400 devices, controlbyweb x-400 firmware +1 moreX-400 Cross-Site Scripting4.5 Medium
- control by web x-600m devices, controlbyweb x-600m firmware +1 moreX-600M Code Injection9.1 Critical
- optinly, optinlyhq optinly – exit intent, newsletter popups, gamification & opt-in forms +1 moreWordPress Optinly Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- nextcloud server, richdocuments, kiteworks security-advisories +2 moreNextcloud Server previews are accessible without a watermark2.3 Low
- google android, owncloud client +1 moreownCloud Android app vulnerable to SQL Injection6.2 Medium
- echelon i.lon vision, enocean smartserver +1 moreEnOcean SmartServer Hard-coded credentials6.3 Medium
- google android, owncloud client +1 moreownCloud Android app vulnerable to Path Traversal5.0 Medium
- tri gigpressGigPress < 2.3.28 - Contributor+ Stored XSS via Shortcode5.4 Medium
- meks flexible shortcodes, mekshq meks flexible shortcodes +1 moreMeks Flexible Shortcodes < 1.3.5 - Contributor+ Stored XSS5.4 Medium
- shapedplugin location weatherLocation Weather < 1.3.4 - Contributor+ Stored XSS5.4 Medium
- unknown social like box and page by wpdevart, wpdevart social like box and page +1 moreSocial Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS5.4 Medium
- twenty20 project twenty20, unknown twenty20 image before-after +1 moreTwenty20 Image Before-After <= 1.5.9 - Contributor+ Stored XSS5.4 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown yarpp, yarpp yet another related posts plugin +1 moreYARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSS5.4 Medium
- toddhalfpenny widgets on pages, widgets on pages project on pages +1 moreWidgets on Pages < 1.8.0 - Contributor+ Stored XSS5.4 Medium
- jgwhite33 wp airbnb review sliderWP Airbnb Review Slider < 3.3 - Subscriber+ SQLi8.8 High
- unknown lightbox gallery, wpgogo lightbox-gallery +1 moreLightbox Gallery < 0.9.5 - Contributor+ Stored XSS via Shortcode5.4 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.1.4 - Unauthorised Actions via CSRF7.1 High
- marcus (aka @msykes) wp fullcalendarWP FullCalendar < 1.5 - Unauthenticated Arbitrary Post Access5.3 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown amazon js, amazonjs project amazonjs +1 moreAmazon JS <= 0.10 - Contributor+ Stored XSS5.4 Medium
- gptaipower gpt ai power, unknown gpt ai power: content writer & chatgpt & image generator & woocommerce product writer & ai training +1 moreGPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content Update4.3 Medium
- unknown utubevideo gallery, utubevideo gallery project gallery +1 moreuTubeVideo Gallery < 2.0.8 - Contributor+ Stored XSS5.4 Medium
- cusrev customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI8.8 High
- shortpixel enable media replaceEnable Media Replace < 4.0.2 - Author+ Arbitrary File Upload8.8 High
- pickplugins product slider for woocommerce, unknown product slider for woocommerce by pickplugins +1 morePickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS5.4 Medium
- jgwhite33 wp google review sliderWP Google Review Slider < 11.8 - Subscriber+ SQLi8.8 High
- codepress visitor statistics, osamaesh wp visitor statistics (real time traffic) +1 moreWP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode5.4 Medium
- tipsandtricks-hq easy accept payments for paypalEasy Accept Payments for PayPal < 4.9.10 - Contributor+ Stored XSS5.4 Medium
- ljapps wp yelp review sliderWP Yelp Review Slider < 7.1 - Subscriber+ SQLi8.8 High
- better font awesome project font awesome, unknown better font awesome +1 moreBetter Font Awesome < 2.0.4 - Contributor+ Stored XSS5.4 Medium
- getlasso simple urlsSimple URLs < 115 - Subscriber+ SQLi8.8 High
- judge product reviews for woocommerce, unknown judge.me product reviews for woocommerce +1 moreJudge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS5.4 Medium
- templatesnext toolkit, unknown templatesnext toolkit +1 moreTemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS5.4 Medium
- conceptbeans mapwizMapwiz <= 1.0.1 - Admin+ SQLi7.2 High
- jgwhite33 wp review sliderWP Review Slider < 12.2 - Subscriber+ SQLi8.8 High
- zohocorp zoho forms, unknown form plugin for wordpress +1 moreZoho Forms < 3.0.1 - Contributor+ Stored XSS5.4 Medium
- amr shortcode any widget project shortcode any widget, unknown amr shortcode any widget +1 moreAmr Shortcode Any Widget <= 4.0 - Contributor+ Stored XSS5.4 Medium
- jgwhite33 wp tripadvisor review sliderWP TripAdvisor Review Slider < 10.8 - Subscriber+ SQLi8.8 High
- smartwp lightweight accordionLightweight Accordion < 1.5.15 - Contributor+ Stored XSS5.4 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 morePinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLi8.8 High
- Show moreLoading…