CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- mappresspro mappress maps for wordpressMapPress Maps for WordPress < 2.88.16 - Unauthenticated Arbitrary Private/Draft Post Disclosure5.3 Medium
- cochinoman splashscreenSplashscreen <= 0.20 - Settings Update via CSRF4.3 Medium
- pixelfedInsufficient authorization allowing elevated access to resources in pixelfed9.9 Critical
- openrefineOpenRefine JDBC Attack Vulnerability7.5 High
- frappe lms, moodle +1 moreInadequate access control vulnerability in Moodle6.5 Medium
- yannick lefebvre link libraryWordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ari soft contact form 7 connectorWordPress Contact Form 7 Connector Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- contest gallery photos and files contest gallery – contact form, upload form, social share and voting plugin for wordpress, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- ftwr wp contact formWordPress WP Contact Form Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpsimpletools basic log viewerWordPress Basic Log Viewer Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- kalli dan. kd coming soonWordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection5.4 Medium
- wpxpo productx – woocommerce builder & gutenberg woocommerce blocks, wowstore +1 moreWordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection8.7 High
- open-xchange appsuite, open-xchange gmbh ox app suite +1 moreReferences to the "app loader" functionality could contain redirects to unexpected locations....5.4 Medium
- open-xchange gmbh ox app suite, open-xchange appsuite +1 moreProcessing of user-defined mail search expressions is not limited. Availability of OX App Suite...6.5 Medium
- open-xchange gmbh ox app suite, open-xchange appsuite +1 moreProcessing time of drive search expressions now gets monitored, and the related request is...6.5 Medium
- open-xchange gmbh ox app suite, open-xchange appsuite +1 moreProcessing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite...6.5 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite +1 moreProcessing of CID references at E-Mail can be abused to inject malicious script code that passes...7.1 High
- open-xchange appsuite, open-xchange gmbh ox app suite +1 moreUser ID references at mentions in document comments were not correctly sanitized. Script code...6.1 Medium
- property hive propertyhiveWordPress PropertyHive Plugin <= 2.0.5 is vulnerable to PHP Object Injection8.7 High
- magepeople team event manager and tickets selling plugin for woocommerce – wpevently – wordpress plugin, mage-people event manager and tickets selling for woocommerce +1 moreWordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection8.2 High
- g5plus ere recently viewed, g5theme ere recently viewed – essential real estate add-on, essential real estate +2 moreWordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection9.8 Critical
- unitedthemes brooklyn, brooklyn | creative multi-purpose responsive wordpress theme, brooklyn creativie multi purpose responsive wordpress theme +2 moreWordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection7.5 High
- wp swings coupon referral programWordPress Coupon Referral Program plugin < 1.8.4 - Unauthenticated PHP Object Injection vulnerability10.0 Critical
- ays-pro chartify, chartify – wordpress chart plugin +1 moreWordPress Chartify Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- automattic sensei lms – online courses, quizzes, & learning, sensei lms +1 moreWordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ninjateam wp chat appWordPress WP Chat App Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- nicdark restaurant reservationsWordPress Restaurant Reservations Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- geek code lab all 404 pages redirect to homepageWordPress All 404 Pages Redirect to Homepage Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)6.1 Medium
- unitedthemes brooklyn, brooklyn | creative multi-purpose responsive wordpress theme +1 moreWordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- arunas liuiza content cards, content cards project cards +1 moreWordPress Content Cards Plugin <= 0.9.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- otwthemes buttons shortcode and widgetWordPress Buttons Shortcode and Widget Plugin <= 1.16 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- swadeshswain before after image slider wp, before after image slider +1 moreWordPress Before After Image Slider WP Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- djo vk poster groupWordPress VK Poster Group Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- prasidhda malla honeypot for wp commentWordPress Honeypot for WP Comment Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- linux kernelIn the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any...8.8 High
- linux kernelprinter_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does...5.5 Medium
- linux kernelA memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel...5.5 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 morecreate_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to...5.5 Medium
- motorola cx2l firmwareA hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the...5.3 Medium
- koha, koha-community koha library software +1 moreCSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in...8.0 High
- gambioSQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL...9.8 Critical
- gambioUnrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows...7.8 High
- gambioServer Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via...9.8 Critical
- gambioCleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive...2.7 Low
- gambioDeserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary...9.8 Critical
- authcrunch caddy-securitycaddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting6.1 Medium
- linux kernel, fedoraproject fedora +1 moredm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in...5.5 Medium
- kde plasma workspace, plasma-workspace +1 moreKDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversal3.1 Low
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: stack overflow problem in open vswitch kernel module leading to dos5.5 Medium
generational-arenacrates.io`generational-arena` is unmaintainedNo score- Show moreLoading…