CVE-2023-2223

The Login rebuilder WordPress plugin before 2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

• CWE-79

• http://packetstormsecurity.com/files/173726/WordPress-Login-Rebuilder-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://wpscan.com/vulnerability/7b356b82-5d03-4f70-b4ce-f1405304bb52Exploit
• http://packetstormsecurity.com/files/173726/WordPress-Login-Rebuilder-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://wpscan.com/vulnerability/7b356b82-5d03-4f70-b4ce-f1405304bb52Exploit

Published

May 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2221The WP Custom Cursors WordPress plugin before 3.2 does not p…7.2
• CVE-2023-2222Rejected reason: This was deemed not a security vulnerabilit…
• CVE-2023-22226Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and e…7.8
• CVE-2023-22227Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and e…7.8
• CVE-2023-22228Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and e…7.8
• CVE-2023-22229Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and e…7.8
• CVE-2023-22230Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and e…7.8
• CVE-2023-22231Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and e…5.5
• CVE-2023-22232Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and ear…5.3
• CVE-2023-22233After Affects versions 23.1 (and earlier), 22.6.3 (and earli…5.5
• CVE-2023-22234Adobe Premiere Rush version 2.6 (and earlier) is affected by…7.8
• CVE-2023-22235InCopy versions 18.1 (and earlier), 17.4 (and earlier) are a…7.8