2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34003 | MEDIUM | 5.3 | 0.3% | Jun 9, 2024 | Missing Authorization vulnerability in Woo WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a th... |
| CVE-2023-31080 | HIGH | 8.8 | 0.4% | Jun 9, 2024 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templa... |
| CVE-2023-23640 | HIGH | 8.8 | 0.3% | Jun 9, 2024 | Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extensi... |
| CVE-2023-23639 | HIGH | 8.8 | 0.3% | Jun 9, 2024 | Missing Authorization vulnerability in MainWP MainWP Staging Extension.This issue affects MainWP Staging Extension: from... |
| CVE-2023-52232 | MEDIUM | 6.5 | 0.3% | Jun 9, 2024 | Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for Woo... |
| CVE-2023-52230 | MEDIUM | 6.5 | 0.4% | Jun 9, 2024 | Missing Authorization vulnerability in Pluggabl LLC Booster Plus for WooCommerce.This issue affects Booster Plus for Woo... |
| CVE-2023-51494 | CRITICAL | 9.8 | 0.4% | Jun 9, 2024 | Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: f... |
| CVE-2023-45707 | MEDIUM | 4.4 | 0.3% | Jun 8, 2024 | HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute... |
| CVE-2023-7261 | HIGH | 7.8 | 0.2% | Jun 7, 2024 | Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform ... |
| CVE-2023-49224 | HIGH | 8 | 0.3% | Jun 7, 2024 | Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file. A remote att... |
| CVE-2023-49223 | HIGH | 8.8 | 0.3% | Jun 7, 2024 | Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the r... |
| CVE-2023-49222 | HIGH | 8.8 | 0.3% | Jun 7, 2024 | Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker co... |
| CVE-2023-49221 | HIGH | 7.8 | 0.2% | Jun 7, 2024 | Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security... |
| CVE-2023-6997 | — | — | — | Jun 7, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-5424 | HIGH | 8.8 | 0.5% | Jun 7, 2024 | The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.9.217. This all... |
| CVE-2023-6491 | MEDIUM | 4.3 | 0.3% | Jun 7, 2024 | The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capab... |
| CVE-2023-32475 | HIGH | 7.6 | 0.2% | Jun 7, 2024 | Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system c... |
| CVE-2023-6876 | MEDIUM | 5.4 | 0.4% | Jun 7, 2024 | The Clever Fox – One Click Website Importer by Nayra Themes plugin for WordPress is vulnerable to unauthorized modificat... |
| CVE-2023-37539 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ab... |
| CVE-2023-51847 | HIGH | 7.5 | 0.6% | Jun 6, 2024 | An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t funct... |
| CVE-2023-49441 | HIGH | 7.5 | 0.7% | Jun 6, 2024 | dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. |
| CVE-2023-45192 | HIGH | 8.2 | 0.7% | Jun 6, 2024 | IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XX... |
| CVE-2023-6968 | MEDIUM | 5.4 | 0.2% | Jun 6, 2024 | The The Moneytizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including... |
| CVE-2023-6966 | HIGH | 8.1 | 0.4% | Jun 6, 2024 | The The Moneytizer plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of ... |
| CVE-2023-6956 | MEDIUM | 6.1 | 0.3% | Jun 6, 2024 | The EasyAzon – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting v... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now