2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1861 | MEDIUM | 5.4 | 28.8% | May 2, 2023 | The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back... |
| CVE-2023-1809 | HIGH | 7.5 | 0.7% | May 2, 2023 | The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowin... |
| CVE-2023-1805 | MEDIUM | 6.1 | 0.5% | May 2, 2023 | The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter ... |
| CVE-2023-1804 | MEDIUM | 6.1 | 0.5% | May 2, 2023 | The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter ... |
| CVE-2023-1730 | CRITICAL | 9.8 | 40.6% | May 2, 2023 | The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL stateme... |
| CVE-2023-1669 | HIGH | 7.2 | 18.5% | May 2, 2023 | The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-p... |
| CVE-2023-1614 | MEDIUM | 4.8 | 0.5% | May 2, 2023 | The WP Custom Author URL WordPress plugin before 1.0.5 does not sanitise and escape some of its settings, which could al... |
| CVE-2023-1554 | MEDIUM | 4.8 | 0.5% | May 2, 2023 | The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which coul... |
| CVE-2023-1546 | MEDIUM | 6.1 | 0.9% | May 2, 2023 | The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leadi... |
| CVE-2023-1525 | MEDIUM | 4.8 | 0.5% | May 2, 2023 | The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2023-1125 | MEDIUM | 6.5 | 0.6% | May 2, 2023 | The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user maki... |
| CVE-2023-1090 | MEDIUM | 4.8 | 0.5% | May 2, 2023 | The SMTP Mailing Queue WordPress plugin before 2.0.1 does not sanitise and escape some of its settings, which could allo... |
| CVE-2023-1021 | MEDIUM | 4.8 | 0.4% | May 2, 2023 | The amr ical events lists WordPress plugin through 6.6 does not sanitise and escape some of its settings, which could al... |
| CVE-2023-0924 | HIGH | 7.2 | 1.0% | May 2, 2023 | The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowin... |
| CVE-2023-0891 | MEDIUM | 5.4 | 0.4% | May 2, 2023 | The StagTools WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputt... |
| CVE-2023-21666 | HIGH | 7.8 | 0.2% | May 2, 2023 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. |
| CVE-2023-21665 | HIGH | 7.8 | 0.2% | May 2, 2023 | Memory corruption in Graphics while importing a file. |
| CVE-2023-21642 | HIGH | 7.8 | 0.1% | May 2, 2023 | Memory corruption in HAB Memory management due to broad system privileges via physical address. |
| CVE-2023-2247 | MEDIUM | 5.3 | 0.4% | May 2, 2023 | In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function |
| CVE-2023-30639 | MEDIUM | 5.4 | 0.3% | May 1, 2023 | Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated maliciou... |
| CVE-2023-29681 | MEDIUM | 5.7 | 0.4% | May 1, 2023 | Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker ... |
| CVE-2023-29680 | MEDIUM | 5.7 | 0.4% | May 1, 2023 | Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attac... |
| CVE-2023-27108 | MEDIUM | 5.3 | 0.6% | May 1, 2023 | An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns t... |
| CVE-2023-27035 | HIGH | 7.5 | 1.8% | May 1, 2023 | An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio an... |
| CVE-2023-26987 | MEDIUM | 6.5 | 1.1% | May 1, 2023 | An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via craf... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now