2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49761 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Gravity Master Product Enquiry for WooCommerce.This issue affects Pro... |
| CVE-2023-49760 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Giannopoulos Kostas WPsoonOnlinePage.This issue affects WPsoonOnlineP... |
| CVE-2023-49759 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team WooDiscuz – WooCommerce Comments.This issue affects Woo... |
| CVE-2023-49163 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Michael Winkler teachPress.This issue affects teachPress: from n/a th... |
| CVE-2023-49155 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder.This issue affec... |
| CVE-2023-49153 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custo... |
| CVE-2023-47530 | HIGH | 7.2 | 0.7% | Dec 18, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 4... |
| CVE-2023-47506 | HIGH | 8.8 | 0.7% | Dec 18, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Mast... |
| CVE-2023-34168 | HIGH | 8.8 | 0.9% | Dec 18, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Repo... |
| CVE-2023-33331 | HIGH | 7.2 | 0.9% | Dec 18, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Produc... |
| CVE-2023-49148 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kulwant Nagi Affiliate Booster – Pros & Cons, Notice, and CTA Blocks ... |
| CVE-2023-48781 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This iss... |
| CVE-2023-48778 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme Product Size Chart For WooCommerce.This issue affects Prod... |
| CVE-2023-48773 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Doctor WooCommerce Login Redirect.This issue affects WooCommerce L... |
| CVE-2023-48772 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Arul Prasad J Prevent Landscape Rotation.This issue affects Prevent L... |
| CVE-2023-48769 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messa... |
| CVE-2023-48768 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in CodeAstrology Team Quantity Plus Minus Button for WooCommerce by Code... |
| CVE-2023-46686 | HIGH | 7.1 | 0.5% | Dec 18, 2023 | A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallaghe... |
| CVE-2023-24590 | HIGH | 8.8 | 0.6% | Dec 18, 2023 | A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memor... |
| CVE-2023-23570 | HIGH | 8.1 | 0.7% | Dec 18, 2023 | Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid con... |
| CVE-2023-6295 | HIGH | 7.2 | 1.0% | Dec 18, 2023 | The SiteOrigin Widgets Bundle WordPress plugin before 1.51.0 does not validate user input before using it to generate pa... |
| CVE-2023-6222 | HIGH | 7.2 | 1.1% | Dec 18, 2023 | IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which coul... |
| CVE-2023-6203 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | The Events Calendar WordPress plugin before 6.2.8.1 discloses the content of password protected posts to unauthenticated... |
| CVE-2023-5949 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts... |
| CVE-2023-5886 | HIGH | 8.8 | 0.5% | Dec 18, 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now