2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-33855LOW3.7Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 m...
CVE-2023-52214HIGH8.8Missing Authorization vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder.This issue affec...
CVE-2023-7251MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Su...
CVE-2023-49838MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in KlbTheme Clotya theme, KlbTheme Cosmetsy theme, KlbTheme Furnob theme...
CVE-2023-45771HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contact Form With ...
CVE-2023-41696——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-33322MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design ...
CVE-2023-32237MEDIUM5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem...
CVE-2023-23991HIGH7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdevelop / Oplugi...
CVE-2023-6175HIGH7.8NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted captur...
CVE-2023-51416MEDIUM6.5Cross-Site Request Forgery (CSRF) vulnerability in EnvialoSimple EnvíaloSimple.This issue affects EnvíaloSimple: from n/...
CVE-2023-49839HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Cosmetsy ...
CVE-2023-7232MEDIUM5.3The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive inf...
CVE-2023-47430HIGH7.5Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via vi...
CVE-2023-48296MEDIUM4.3OroPlatform is a PHP Business Application Platform (BAP). Navigation history, most viewed and favorite navigation items...
CVE-2023-45824MEDIUM4.3OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages o...
CVE-2023-27608CRITICAL9.8Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Reward...
CVE-2023-25039HIGH8.8Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0...
CVE-2023-22699MEDIUM5.4Missing Authorization vulnerability in MainWP MainWP Wordfence Extension.This issue affects MainWP Wordfence Extension: ...
CVE-2023-37886HIGH8.8Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
CVE-2023-37885HIGH8.8Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
CVE-2023-33923MEDIUM4.3Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Vi...
CVE-2023-30480MEDIUM4.3Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5.
CVE-2023-5685HIGH7.5A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier st...
CVE-2023-4063MEDIUM5.3Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now