2023 CVE Vulnerabilities

31,245 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-45857MEDIUM6.5An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it i...
CVE-2023-0392MEDIUM6.7The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execut...
CVE-2023-47231MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 version...
CVE-2023-47229MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vyas Dipen Top 25 Social Icons plugin <= 3.1 ver...
CVE-2023-47228MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.
CVE-2023-47227MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one plac...
CVE-2023-47226MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plug...
CVE-2023-47223MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2...
CVE-2023-47190MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plu...
CVE-2023-47181MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions.
CVE-2023-3282MEDIUM6.7A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu...
CVE-2023-47379MEDIUM5.4Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload func...
CVE-2023-46643MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GARY JEZORSKI CloudNet360 plugin <= 3.2.0 versions.
CVE-2023-46642MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin <= 1...
CVE-2023-5136MEDIUM5.5An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An atta...
CVE-2023-46640MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions.
CVE-2023-46627MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 v...
CVE-2023-46626MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FLOWFACT WP Connector plugin <= 2.1.7 versions.
CVE-2023-46621MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Enej Bajgoric / Gagan Sandhu / CTLT DEV User Avatar plugin...
CVE-2023-46613MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <=...
CVE-2023-45140MEDIUM4.6The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins...
CVE-2023-32298MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kathy Darling Simple User Listing plugin <= 1.9.2 versions...
CVE-2023-46756MEDIUM5.3Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may caus...
CVE-2023-46764MEDIUM5.3Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause backgroun...
CVE-2023-46763MEDIUM5.3Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerabi...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now