CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- dell data protection searchDell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain...8.8 High
- dataeaseThe Dataease datasource exists deserialization and arbitrary file read vulnerability9.1 Critical
- glpi-project glpiGLPI LDAP Injection during authentication5.9 Medium
- glpi-project glpiGLPI reflected XSS in reports pages6.5 Medium
- openstack glance-store, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreGlance-store: glance store access key logged in debug log level5.5 Medium
- 3ds delmia aprisoInsertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 20244.4 Medium
- 3ds biovia materials studio, dassault systèmes biovia materials studio products +1 moreOS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 20238.8 High
xorg-serverUbuntuxorg-server, xwayland regressionNo scoreglibcUbuntuglibc vulnerabilitiesNo score- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreWordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pluginus wordpress currency switcher, realmag777 wpcs – wordpress currency switcher professional +1 moreWordPress WPCS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)5.5 Medium
- codeboxr team cbx bookmark & favorite, codeboxr cbx bookmark \& favorite +1 moreWordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wpbookingcalendar booking calendar, wpdevelop wp booking calendar +1 moreWordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wpeverest everest forms – build contact forms, surveys, polls, application forms, and more with ease!, everest forms +1 moreWordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- epiph embed privacyWordPress Embed Privacy Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- themify icons, themifyme themify icons +1 moreWordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- icegram engage – wordpress lead generation, popup builder, cta, optins and email list building, engage +1 moreWordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- advancedcoding comments – wpdiscuz, gvectors wpdiscuz +1 moreWordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- advanced iframe iframe, mdempfle advanced iframe +1 moreWordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- naa986 easy video playerWordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jgwhite33 wp review sliderWordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- awesomemotive easy digital downloads, easy digital downloads – sell digital files (ecommerce store & payments made easy), smub easy digital downloads – sell digital files (ecommerce store & payments made easy) +2 moreWordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- brave – create popup, optins, lead generation, survey, sticky elements & interactive content, getbrave brave +1 moreWordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- magazine3 schema & structured data for wp & amp, structured-data-for-wp download schema \& structured data for wp \& amp +1 moreWordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- crm perks forms – wordpress form builder, crmperks crm perks forms +1 moreWordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- aam advanced access manager – restricted content, users & roles, enhanced security and more, vasyltech advanced access manager +1 moreWordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- artios media product code for woocommerceWordPress Product Code for WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- pickplugins related postWordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- neil gee slicknav mobile menuWordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- kunal nagar custom 404 proWordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wp event manager user profile avatar, wp-eventmanager wp event manager +1 moreWordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- michael uno (miunosoft) auto amazon links – amazon associates affiliate plugin, michaeluno auto amazon links +1 moreWordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- russell jamieson footer putterWordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jhayghost ideal interactive mapWordPress Ideal Interactive Map Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- torbjon infogram, infogram – add charts, maps and infographics +1 moreWordPress Infogram Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- keap official opt-in forms, unknown keap official opt-in forms +1 moreWordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions...5.5 Medium
- live composer team page builder: live composer, blueastral page builder\ +1 moreWordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- dell powerscale onefsDell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for...6.6 Medium
- takayuki miyauchi oembed gistWordPress oEmbed Gist Plugin <= 4.9.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- kerryjames posts to page, posts to page kerry james +1 moreWordPress Posts to Page Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- scribit shortcodes finderWordPress Shortcodes Finder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wp smart editor joomunited, joomunited wp-smart-editor +1 moreWordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- estore-wss payment exPayment EX Ver1.1.5b and earlier allows a remote unauthenticated attacker to obtain the...6.5 Medium
- basixonline nex-forms, webaways nex-forms – ultimate forms plugin for wordpress +1 moreNEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()5.3 Medium
- basixonline nex-forms, webaways nex-forms – ultimate forms plugin for wordpress +1 moreNEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_starred()5.3 Medium
- basixonline nex-forms, webaways nex-forms – ultimate forms plugin for wordpress +1 moreNEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()5.3 Medium
- group-office group officeCross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and...5.4 Medium
- mdempfle advanced iframeAdvanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- hashicorp vault, vault enterprise +1 moreVault May Expose Sensitive Information When Configuring An Audit Log Device4.5 Medium
- Show moreLoading…