CVEs published in February 2024
2,905 vulnerabilities, 342 critical, 12 exploited.
- tenda ac6 firmwareA stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02...8.1 High
- d-link dir-816 a2 firmware, dlink dir-816 firmware +1 moreCommand Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04...9.8 Critical
- d-link dir 882 firmware, dlink dir-882 firmware +1 moreCommand Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows...8.8 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability...5.4 Medium
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response...7.5 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v031. A URL Redirection to an...5.4 Medium
- wolfsslHeap-buffer over-read with WOLFSSL_CALLBACKS5.3 Medium
- yetanalytics lrs, sql lrs +1 morecom.yetanalytics/lrs has Cross-site Scripting Vulnerability in Statement Browser4.6 Medium
- mantisbtMantisBT Host Header Injection vulnerability8.3 High
- electronjs electroncordkedi ElectronCord's Discord Token is public7.5 High
- apache airflow mongo provider, apache-airflow-providers-mongo +1 moreApache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflow-providers-mongo9.1 Critical
- meshcentralMeshCentral cross-site websocket hijacking (CSWSH) vulnerability8.4 High
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery5.4 Medium
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data6.5 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion5.4 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in stopOptimizeAll4.3 Medium
- kaliforms contact form builder, wpchill kali forms — contact form & drag-and-drop builder +1 moreContact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization4.3 Medium
- themeum tutor lms – elearning and online course solution, tutor lms +1 moreTutor LMS <= 2.6.0 - Missing Authorization4.3 Medium
- sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 moreSunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice5.3 Medium
- leevio happy addons for elementorHappy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fooplugins foogallery, gallery by foogallery +1 moreBest WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings4.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.87 - Missing Authorization via wpr_update_form_action_meta5.3 Medium
- cozmoslabs paid membership subscriptions – effortless memberships, recurring payments & content restriction, membership \& content restriction - paid member subscriptions, iovamihai paid membership subscriptions effortless memberships recurring payments and content restriction +2 morePaid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return5.3 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection8.8 High
- wpcodefactory cost of goods: product cost & profit calculator for woocommerce, wpfactory cost of goods for woocommerce +1 moreCost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site Scripting6.1 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in optimizeAllOn4.3 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization4.3 Medium
- f1logic insert php code snippetInsert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- microsoft clarity, sammartin microsoft clarity +1 moreMicrosoft Clarity <= 0.9.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- malihu page scroll to idPage scroll to id <= 1.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- booster for woocommerce, pluggabl booster for woocommerce – pdf invoices, abandoned cart, variation swatches & 100+ tools +1 moreBooster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.13 - Cross-Site Request Forgery to Settings Update in disableOptimization4.3 Medium
- oliverpos oliver pos – a woocommerce point of sale (pos), oliver pos +1 moreOliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.1 - Missing Authorization7.3 High
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton8.8 High
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_wishlist4.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via add_to_compare4.3 Medium
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change5.3 Medium
- magazine3 schema & structured data for wp & amp, schema \& structured data for wp \& amp +1 moreSchema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification4.3 Medium
- wpexperts password protected, saadiqbal password protected — lock entire site, pages, posts, categories, and partial content +1 morePassword Protected <= 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 moreRoyal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via remove_from_compare4.3 Medium
- dgewirtz my private siteMy Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API5.3 Medium
- davidoffneal simple share buttons adderSimple Share Buttons Adder <= 8.4.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings4.4 Medium
- magazine3 schema & structured data for wp & amp, schema \& structured data for wp \& amp +1 moreSchema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting6.4 Medium
- imagerecycle pdf & image compression, pdf \& image compression +1 moreImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in optimizeAllOn4.3 Medium
- fifu featured image from url, marceljm featured image from url (fifu) +1 moreFeatured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url6.4 Medium
- kaliforms contact form builder, wpchill kali forms — contact form & drag-and-drop builder +1 moreContact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation7.6 High
- onlineoptimisation email encoder – protect email addresses and phone numbers, email encoder +1 moreEmail Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- Show moreLoading…