2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1806 | MEDIUM | 6.1 | 0.5% | May 8, 2023 | The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outp... |
| CVE-2023-1660 | MEDIUM | 6.1 | 0.3% | May 8, 2023 | The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing... |
| CVE-2023-1651 | MEDIUM | 5.4 | 0.2% | May 8, 2023 | The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to upda... |
| CVE-2023-1650 | CRITICAL | 9.8 | 34.4% | May 8, 2023 | The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauth... |
| CVE-2023-1649 | MEDIUM | 4.8 | 0.4% | May 8, 2023 | The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow hi... |
| CVE-2023-1408 | HIGH | 7.2 | 3.2% | May 8, 2023 | The Video List Manager WordPress plugin through 1.7 does not properly sanitise and escape a parameter before using it in... |
| CVE-2023-1347 | HIGH | 7.2 | 16.0% | May 8, 2023 | The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which coul... |
| CVE-2023-1011 | MEDIUM | 6.1 | 0.2% | May 8, 2023 | The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the das... |
| CVE-2023-0948 | MEDIUM | 6.1 | 0.9% | May 8, 2023 | The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in att... |
| CVE-2023-0894 | MEDIUM | 4.8 | 0.4% | May 8, 2023 | The Pickup | Delivery | Dine-in date time WordPress plugin through 1.0.9 does not sanitise and escape some of its settin... |
| CVE-2023-0768 | HIGH | 8.8 | 0.9% | May 8, 2023 | The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortco... |
| CVE-2023-0603 | HIGH | 8.8 | 13.9% | May 8, 2023 | The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is mis... |
| CVE-2023-0544 | MEDIUM | 4.8 | 0.4% | May 8, 2023 | The WP Login Box WordPress plugin through 2.0.2 does not sanitise and escape some of its settings, which could allow hig... |
| CVE-2023-0542 | MEDIUM | 5.4 | 0.4% | May 8, 2023 | The Custom Post Type List Shortcode WordPress plugin through 1.4.4 does not validate and escape some of its shortcode at... |
| CVE-2023-0537 | MEDIUM | 5.4 | 0.5% | May 8, 2023 | The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcod... |
| CVE-2023-0536 | MEDIUM | 5.4 | 0.4% | May 8, 2023 | The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting... |
| CVE-2023-0526 | MEDIUM | 5.4 | 0.4% | May 8, 2023 | The Post Shortcode WordPress plugin through 2.0.9 does not validate and escape some of its shortcode attributes before o... |
| CVE-2023-0522 | MEDIUM | 6.5 | 0.3% | May 8, 2023 | The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updati... |
| CVE-2023-0514 | MEDIUM | 6.1 | 0.9% | May 8, 2023 | The Membership Database WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back ... |
| CVE-2023-0421 | MEDIUM | 6.1 | 0.5% | May 8, 2023 | The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it... |
| CVE-2023-0280 | MEDIUM | 5.4 | 0.4% | May 8, 2023 | The Ultimate Carousel For Elementor WordPress plugin through 2.1.7 does not validate and escape some of its block option... |
| CVE-2023-0268 | MEDIUM | 5.4 | 0.4% | May 8, 2023 | The Mega Addons For WPBakery Page Builder WordPress plugin before 4.3.0 does not validate and escape some of its shortco... |
| CVE-2023-0267 | MEDIUM | 5.4 | 0.4% | May 8, 2023 | The Ultimate Carousel For WPBakery Page Builder WordPress plugin through 2.6 does not validate and escape some of its sh... |
| CVE-2023-2575 | HIGH | 8.8 | 16.7% | May 8, 2023 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability,... |
| CVE-2023-2574 | HIGH | 8.8 | 4.8% | May 8, 2023 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by an command injection vulnerability in the de... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now