2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-28990MEDIUM4.3Missing Authorization vulnerability in HashThemes Viral Mag allows Exploiting Incorrectly Configured Access Control Secu...
CVE-2023-27456MEDIUM4.3Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security...
CVE-2023-25988HIGH7.5Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Inc...
CVE-2023-22697CRITICAL9.8Missing Authorization vulnerability in Survey Maker team Survey Maker allows Exploiting Incorrectly Configured Access Co...
CVE-2023-23472MEDIUM6.5IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain ...
CVE-2023-37395LOW3.3IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryptio...
CVE-2023-6947HIGH7.7The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions...
CVE-2023-43962MEDIUM4.8Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary co...
CVE-2023-7298MEDIUM4.4A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A ...
CVE-2023-41953MEDIUM5.3Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n...
CVE-2023-51362MEDIUM5.3Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configur...
CVE-2023-51360HIGH8.8Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Inc...
CVE-2023-51359HIGH8.8Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Inc...
CVE-2023-51357MEDIUM5.3Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploit...
CVE-2023-51355HIGH8.2Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrect...
CVE-2023-51353CRITICAL9.8Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Con...
CVE-2023-50904MEDIUM5.3Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Con...
CVE-2023-50903CRITICAL9.8Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Se...
CVE-2023-50899MEDIUM5.4Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Explo...
CVE-2023-50887MEDIUM5.3Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly Configu...
CVE-2023-50884MEDIUM6.5Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploit...
CVE-2023-50882MEDIUM5.3Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configur...
CVE-2023-50877MEDIUM4.3Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Co...
CVE-2023-50876MEDIUM4.3Missing Authorization vulnerability in Molongui Molongui allows Exploiting Incorrectly Configured Access Control Securit...
CVE-2023-50375MEDIUM5.3Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting In...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now