2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-45197CRITICAL9.8The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the ro...
CVE-2023-51375HIGH8.8Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3.
CVE-2023-52884MEDIUM4.4In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to su...
CVE-2023-3352MEDIUM4.3The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability ch...
CVE-2023-3353——Rejected reason: ** REJECT ** Developer patched two issues with a single patch, so only one CVE is necessary. Please use...
CVE-2023-49113HIGH7.8The Kiuwan Local Analyzer (KLA) Java scanning application contains several hard-coded secrets in plain text format. In ...
CVE-2023-49112MEDIUM6.5Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing on...
CVE-2023-49111MEDIUM6.5For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack ca...
CVE-2023-49110HIGH7.2When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud...
CVE-2023-52883HIGH7.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible null pointer dereference ...
CVE-2023-25646MEDIUM6.4There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attac...
CVE-2023-3204MEDIUM6.5The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, ...
CVE-2023-39312HIGH8.8Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.
CVE-2023-38394HIGH8.8Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0.
CVE-2023-38393HIGH8.8Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.2...
CVE-2023-36516HIGH8.8Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.
CVE-2023-36515CRITICAL9.8Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.
CVE-2023-25697MEDIUM6.3Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.This issue affects GamiPress: from n/a through 2.5.6.
CVE-2023-39310MEDIUM5.4Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3....
CVE-2023-37872MEDIUM6.5Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to...
CVE-2023-37869HIGH8.8Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a...
CVE-2023-36684CRITICAL9.8Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7...
CVE-2023-36683MEDIUM6.5Missing Authorization vulnerability in WP SCHEMA PRO Schema Pro.This issue affects Schema Pro: from n/a through 2.7.8.
CVE-2023-36676HIGH8.8Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.
CVE-2023-41805MEDIUM6.5Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates as...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now