# CVEs published 2024-02-10 30 CVEs were published on February 10, 2024: 0 critical, 4 high. Days are UTC. - [CVE-2024-22313](https://cve.now/CVE-2024-22313.md): IBM Storage Defender - Resiliency Service information disclosure (CVSS 6.2, IBM Storage Defender - Resiliency Service) - [CVE-2024-22312](https://cve.now/CVE-2024-22312.md): IBM Storage Defender - Resiliency Service information disclosure (CVSS 4.4, IBM Storage Defender - Resiliency Service) - [CVE-2023-50957](https://cve.now/CVE-2023-50957.md): IBM Storage Defender - Resiliency Service privilege escalation (CVSS 8.0, IBM Storage Defender - Resiliency Service) - [CVE-2024-22361](https://cve.now/CVE-2024-22361.md): IBM Semeru Runtime information disclosure (CVSS 5.9, IBM Semeru Runtime) - [CVE-2023-51404](https://cve.now/CVE-2023-51404.md): WordPress My Agile Privacy Plugin \<= 2.1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, MyAgilePrivacy My Agile Privacy – The only GDPR solution fo…) - [CVE-2023-51415](https://cve.now/CVE-2023-51415.md): WordPress GiveWP Plugin \<= 3.2.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, GiveWP – Donation Plugin and Fundraising Platform) - [CVE-2023-51480](https://cve.now/CVE-2023-51480.md): WordPress Active Products Tables for WooCommerce Plugin \<= 1.0.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, realmag777 Active Products Tables for WooCommerce. Professi…) - [CVE-2023-51485](https://cve.now/CVE-2023-51485.md): WordPress Pay with Vipps for WooCommerce Plugin \<= 1.14.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WP Hosting Pay with Vipps and MobilePay for WooCommerce) - [CVE-2023-51488](https://cve.now/CVE-2023-51488.md): WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin \<= 3.0.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Automattic Crowdsignal Dashboard – Polls, Surveys & more) - [CVE-2023-51492](https://cve.now/CVE-2023-51492.md): WordPress If-So Dynamic Content Personalization Plugin \<= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, If So Plugin If-So Dynamic Content Personalization) - [CVE-2023-51493](https://cve.now/CVE-2023-51493.md): WordPress Custom Post Carousels with Owl Plugin \<= 1.4.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Howard Ehrenberg Custom Post Carousels with Owl) - [CVE-2024-23514](https://cve.now/CVE-2024-23514.md): WordPress Click To Tweet Plugin \<= 2.0.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, ClickToTweet.com Click To Tweet) - [CVE-2024-23516](https://cve.now/CVE-2024-23516.md): WordPress CC BMI Calculator Plugin \<= 2.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Calculators World CC BMI Calculator) - [CVE-2024-23517](https://cve.now/CVE-2024-23517.md): WordPress Scheduling Plugin – Online Booking for WordPress Plugin \<= 3.5.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Start Booking Scheduling Plugin – Online Booking for WordPr…) - [CVE-2024-24712](https://cve.now/CVE-2024-24712.md): WordPress Heateor Social Login Plugin \<= 1.1.30 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Team Heateor Heateor Social Login WordPress) - [CVE-2024-24713](https://cve.now/CVE-2024-24713.md): WordPress Auto Listings Plugin \<= 2.6.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WP Auto Listings Auto Listings – Car Listings & Car Dealers…) - [CVE-2024-24717](https://cve.now/CVE-2024-24717.md): WordPress Beds24 Online Booking Plugin \<= 2.0.23 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Mark Kinchin Beds24 Online Booking) - [CVE-2024-24801](https://cve.now/CVE-2024-24801.md): WordPress OWL Carousel Plugin \<= 1.4.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, LogicHunt OWL Carousel – WordPress Owl Carousel Slider) - [CVE-2024-24803](https://cve.now/CVE-2024-24803.md): WordPress Ultra Companion Plugin \<= 1.1.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Ultra Companion – Companion plugin for WPoperation Themes) - [CVE-2024-24804](https://cve.now/CVE-2024-24804.md): WordPress MW WP Form Plugin \<= 5.0.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, websoudan MW WP Form) - [CVE-2024-24831](https://cve.now/CVE-2024-24831.md): WordPress Premium Addons for Elementor plugin \<= 4.10.16 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Leap13 Premium Addons for Elementor) - [CVE-2024-1406](https://cve.now/CVE-2024-1406.md): Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure (CVSS 4.3, Linksys WRT54GL) - [CVE-2024-0596](https://cve.now/CVE-2024-0596.md): Awesome Support – WordPress HelpDesk & Support Plugin \<= 6.1.7 - Missing Authorization via editor\_html() (CVSS 5.3, awesomesupport Awesome Support – WordPress HelpDesk & Suppo…) - [CVE-2024-0595](https://cve.now/CVE-2024-0595.md): Awesome Support – WordPress HelpDesk & Support Plugin \<= 6.1.7 - Missing Authorization via wpas\_get\_users() (CVSS 4.3, awesomesupport Awesome Support – WordPress HelpDesk & Suppo…) - [CVE-2024-0594](https://cve.now/CVE-2024-0594.md): Awesome Support – WordPress HelpDesk & Support Plugin \<= 6.1.7 - Authenticated (Subscriber+) SQL Injection (CVSS 8.8, awesomesupport Awesome Support – WordPress HelpDesk & Suppo…) - [CVE-2024-1405](https://cve.now/CVE-2024-1405.md): Linksys WRT54GL Web Management Interface wlaninfo.htm information disclosure (CVSS 4.3, Linksys WRT54GL) - [CVE-2024-21490](https://cve.now/CVE-2024-21490.md): This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. (CVSS 7.5, angular · org.webjars.bower:angular +2) - [CVE-2023-45698](https://cve.now/CVE-2023-45698.md): HCL Sametime is impacted by clickjacking (CVSS 4.8, HCL Software HCL Sametime) - [CVE-2023-28077](https://cve.now/CVE-2023-28077.md): Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. (CVSS 4.4, Dell BSAFE SSL-J) - [CVE-2023-45696](https://cve.now/CVE-2023-45696.md): HCL Sametime is impacted by an autocomplete enabled vulnerability (CVSS 4.0, HCL Software HCL Sametime) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2024-02-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.