2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28134 | HIGH | 7.8 | 0.2% | Nov 12, 2023 | Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Secur... |
| CVE-2023-27632 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.03.08 versions. |
| CVE-2023-27623 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jens Törnell WP Page Numbers plugin <= 0.5 versions. |
| CVE-2023-27611 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in audrasjb Reusable Blocks Extended plugin <= 0.9 versions. |
| CVE-2023-27431 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk Big Store theme <= 1.9.3 versions. |
| CVE-2023-27418 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin <= 4.0 v... |
| CVE-2023-27417 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Timo Reith Affiliate Super Assistent plugin <= 1.5.1 versions. |
| CVE-2023-29425 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9... |
| CVE-2023-29238 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising... |
| CVE-2023-28987 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. |
| CVE-2023-28930 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Robin Phillips Mobile Banner plugin <= 1.5 versions. |
| CVE-2023-28696 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request F... |
| CVE-2023-28694 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin... |
| CVE-2023-28618 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin <= 1.16 versions. |
| CVE-2023-28498 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions. |
| CVE-2023-28497 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions. |
| CVE-2023-28495 | HIGH | 8.8 | 0.3% | Nov 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop WP Shortcode by MyThemeShop plugin <= 1.4.16 versions. |
| CVE-2023-47390 | HIGH | 7.5 | 0.7% | Nov 11, 2023 | Headscale through 0.22.3 writes bearer tokens to info-level logs. |
| CVE-2023-46849 | HIGH | 7.5 | 1.1% | Nov 11, 2023 | Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger... |
| CVE-2023-47108 | HIGH | 7.5 | 1.6% | Nov 10, 2023 | OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and pr... |
| CVE-2023-47611 | HIGH | 7.8 | 0.2% | Nov 10, 2023 | A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit C... |
| CVE-2023-6076 | HIGH | 7.5 | 1.0% | Nov 10, 2023 | A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this ... |
| CVE-2023-47120 | HIGH | 7.5 | 1.0% | Nov 10, 2023 | Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch an... |
| CVE-2023-41285 | HIGH | 8.8 | 0.5% | Nov 10, 2023 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authentic... |
| CVE-2023-41284 | HIGH | 8.8 | 0.5% | Nov 10, 2023 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authentic... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now