2023 CVE Vulnerabilities

31,442 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-24534HIGH7.5HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading t...
CVE-2023-22985MEDIUM6.1Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referr...
CVE-2023-1913MEDIUM4.8The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versio...
CVE-2023-1912MEDIUM6.1The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lock logging feature ...
CVE-2023-25062MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9...
CVE-2023-24396MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugi...
CVE-2023-24378MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeat Glossary plugin <= 2.1.27 versions.
CVE-2023-24374MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builder...
CVE-2023-23891MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.1 versions. Ne...
CVE-2023-0750CRITICAL9.8Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface.  When the device can be ac...
CVE-2023-23801HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions.
CVE-2023-1908CRITICAL9.8A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Af...
CVE-2023-24411MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kerry Kline BNE Testimonials plugin <= 2.0.7 ver...
CVE-2023-24403MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP For The Win bbPress Voting plugin <= 2.1.11.0 versi...
CVE-2023-24387MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions.
CVE-2023-24383MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions.
CVE-2023-23898MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.6...
CVE-2023-0652HIGH7.8Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WA...
CVE-2023-24004MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin ...
CVE-2023-24003MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2...
CVE-2023-24002MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt...
CVE-2023-1802HIGH7.5In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the H...
CVE-2023-24006MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions.
CVE-2023-24001MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions...
CVE-2023-23998MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikRentCar Car Rental Management System plu...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now