CVEs published February 10, 2024
30 CVEs were published on February 10, 2024: 0 critical, 4 high.
- Published
- 30
- Critical
- 0
- High
- 4
- Medium
- 26
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- awesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- 3
- IBM Storage Defender - Resiliency Service
- 3
- HCL Software HCL Sametime
- 2
- Linksys WRT54GL
- 2
- angular · org.webjars.bower:angular +2
- 1
- Automattic Crowdsignal Dashboard – Polls, Surveys & more
- 1
- Calculators World CC BMI Calculator
- 1
- ClickToTweet.com Click To Tweet
- 1
- Dell BSAFE SSL-J
- 1
- GiveWP – Donation Plugin and Fundraising Platform
- 1
High 4
- CVE-2023-50957IBM Storage Defender - Resiliency Service privilege escalationIBM Storage Defender - Resiliency Service
- CVE-2023-51488WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Scripting (XSS)Automattic Crowdsignal Dashboard – Polls, Surveys & more
- CVE-2024-0594Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injectionawesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- CVE-2024-21490This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0.angular · org.webjars.bower:angular +2
Medium, low and unrated 26
- CVE-2024-22313IBM Storage Defender - Resiliency Service information disclosureIBM Storage Defender - Resiliency Service
- CVE-2024-22312IBM Storage Defender - Resiliency Service information disclosureIBM Storage Defender - Resiliency Service
- CVE-2024-22361IBM Semeru Runtime information disclosureIBM Semeru Runtime
- CVE-2023-51404WordPress My Agile Privacy Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)MyAgilePrivacy My Agile Privacy – The only GDPR solution fo…
- CVE-2023-51415WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)GiveWP – Donation Plugin and Fundraising Platform
- CVE-2023-51480WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)realmag777 Active Products Tables for WooCommerce. Professi…
- CVE-2023-51485WordPress Pay with Vipps for WooCommerce Plugin <= 1.14.13 is vulnerable to Cross Site Scripting (XSS)WP Hosting Pay with Vipps and MobilePay for WooCommerce
- CVE-2023-51492WordPress If-So Dynamic Content Personalization Plugin <= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS)If So Plugin If-So Dynamic Content Personalization
- CVE-2023-51493WordPress Custom Post Carousels with Owl Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)Howard Ehrenberg Custom Post Carousels with Owl
- CVE-2024-23514WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)ClickToTweet.com Click To Tweet
- CVE-2024-23516WordPress CC BMI Calculator Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)Calculators World CC BMI Calculator
- CVE-2024-23517WordPress Scheduling Plugin – Online Booking for WordPress Plugin <= 3.5.10 is vulnerable to Cross Site Scripting (XSS)Start Booking Scheduling Plugin – Online Booking for WordPr…
- CVE-2024-24712WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS)Team Heateor Heateor Social Login WordPress
- CVE-2024-24713WordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)WP Auto Listings Auto Listings – Car Listings & Car Dealers…
- CVE-2024-24717WordPress Beds24 Online Booking Plugin <= 2.0.23 is vulnerable to Cross Site Scripting (XSS)Mark Kinchin Beds24 Online Booking
- CVE-2024-24801WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)LogicHunt OWL Carousel – WordPress Owl Carousel Slider
- CVE-2024-24803WordPress Ultra Companion Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)Ultra Companion – Companion plugin for WPoperation Themes
- CVE-2024-24804WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)websoudan MW WP Form
- CVE-2024-24831WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerabilityLeap13 Premium Addons for Elementor
- CVE-2024-1406Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosureLinksys WRT54GL
- CVE-2024-0596Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via editor_html()awesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- CVE-2024-0595Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Missing Authorization via wpas_get_users()awesomesupport Awesome Support – WordPress HelpDesk & Suppo…
- CVE-2024-1405Linksys WRT54GL Web Management Interface wlaninfo.htm information disclosureLinksys WRT54GL
- CVE-2023-45698HCL Sametime is impacted by clickjackingHCL Software HCL Sametime
- CVE-2023-28077 Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability.Dell BSAFE SSL-J
- CVE-2023-45696HCL Sametime is impacted by an autocomplete enabled vulnerabilityHCL Software HCL Sametime