2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-7014 | HIGH | 7.5 | 0.7% | Feb 5, 2024 | The Author Box, Guest Author and Co-Authors for Your Posts – Molongui plugin for WordPress is vulnerable to Sensitive In... |
| CVE-2023-6996 | HIGH | 8.8 | 1.1% | Feb 5, 2024 | The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Code Inje... |
| CVE-2023-6989 | CRITICAL | 9.8 | 56.6% | Feb 5, 2024 | The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local Fil... |
| CVE-2023-6985 | HIGH | 8.8 | 1.4% | Feb 5, 2024 | The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of... |
| CVE-2023-6983 | MEDIUM | 4.3 | 0.5% | Feb 5, 2024 | The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Insecure ... |
| CVE-2023-6982 | MEDIUM | 5.4 | 0.4% | Feb 5, 2024 | The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2023-6963 | MEDIUM | 5.3 | 0.5% | Feb 5, 2024 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0... |
| CVE-2023-6959 | MEDIUM | 4.3 | 0.4% | Feb 5, 2024 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c... |
| CVE-2023-6953 | MEDIUM | 5.4 | 0.4% | Feb 5, 2024 | The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scr... |
| CVE-2023-6933 | HIGH | 8.8 | 68.0% | Feb 5, 2024 | The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includin... |
| CVE-2023-6925 | HIGH | 7.2 | 1.5% | Feb 5, 2024 | The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insuf... |
| CVE-2023-6884 | MEDIUM | 5.4 | 0.6% | Feb 5, 2024 | This plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to,... |
| CVE-2023-6846 | HIGH | 8.8 | 15.9% | Feb 5, 2024 | The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8... |
| CVE-2023-6808 | MEDIUM | 5.4 | 0.5% | Feb 5, 2024 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script... |
| CVE-2023-6807 | MEDIUM | 5.4 | 0.4% | Feb 5, 2024 | The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta... |
| CVE-2023-6701 | MEDIUM | 5.4 | 0.5% | Feb 5, 2024 | The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text fie... |
| CVE-2023-6700 | HIGH | 8.8 | 1.5% | Feb 5, 2024 | The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due t... |
| CVE-2023-6635 | HIGH | 7.2 | 1.6% | Feb 5, 2024 | The EditorsKit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the '... |
| CVE-2023-6557 | MEDIUM | 5.3 | 0.6% | Feb 5, 2024 | The The Events Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and ... |
| CVE-2023-6526 | MEDIUM | 5.4 | 0.4% | Feb 5, 2024 | The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via c... |
| CVE-2023-4637 | MEDIUM | 5.3 | 0.6% | Feb 5, 2024 | The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the r... |
| CVE-2023-34042 | MEDIUM | 5.5 | 0.2% | Feb 5, 2024 | The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extra... |
| CVE-2023-22819 | MEDIUM | 4.9 | 0.8% | Feb 5, 2024 | An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to co... |
| CVE-2023-22817 | MEDIUM | 5.5 | 0.2% | Feb 5, 2024 | Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL ... |
| CVE-2023-51951 | CRITICAL | 9.8 | 1.4% | Feb 5, 2024 | SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now