2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-7048 | MEDIUM | 4.3 | 0.2% | Jan 11, 2024 | The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,... |
| CVE-2023-7019 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The LightStart – Maintenance Mode, Coming Soon and Landing Page Builder plugin for WordPress is vulnerable to unauthoriz... |
| CVE-2023-6994 | MEDIUM | 6.4 | 0.4% | Jan 11, 2024 | The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' sho... |
| CVE-2023-6990 | MEDIUM | 5.4 | 0.3% | Jan 11, 2024 | The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions ... |
| CVE-2023-6988 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's extend_build... |
| CVE-2023-6979 | HIGH | 8.8 | 1.1% | Jan 11, 2024 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file ty... |
| CVE-2023-6934 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Limit Login Attempts Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sho... |
| CVE-2023-6924 | MEDIUM | 4.8 | 0.5% | Jan 11, 2024 | The Photo Gallery by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in versions up ... |
| CVE-2023-6882 | MEDIUM | 6.1 | 0.4% | Jan 11, 2024 | The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘environment_mode’ pa... |
| CVE-2023-6878 | MEDIUM | 6.5 | 0.5% | Jan 11, 2024 | The Slick Social Share Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ... |
| CVE-2023-6875 | CRITICAL | 9.8 | 90.3% | Jan 11, 2024 | The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i... |
| CVE-2023-6855 | MEDIUM | 5.3 | 0.5% | Jan 11, 2024 | The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerab... |
| CVE-2023-6828 | MEDIUM | 6.1 | 0.4% | Jan 11, 2024 | The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to... |
| CVE-2023-6782 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2023-6781 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fie... |
| CVE-2023-6776 | MEDIUM | 5.4 | 0.3% | Jan 11, 2024 | The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Ready Function’ field in all ... |
| CVE-2023-6751 | MEDIUM | 6.5 | 0.4% | Jan 11, 2024 | The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability chec... |
| CVE-2023-6742 | MEDIUM | 4.3 | 0.4% | Jan 11, 2024 | The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification ... |
| CVE-2023-6737 | MEDIUM | 6.1 | 0.5% | Jan 11, 2024 | The Enable Media Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the SHORTPIXEL_DEBUG p... |
| CVE-2023-6684 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ive' s... |
| CVE-2023-6645 | MEDIUM | 5.4 | 0.3% | Jan 11, 2024 | The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the cus... |
| CVE-2023-6638 | MEDIUM | 5.3 | 0.5% | Jan 11, 2024 | The GTG Product Feed for Shopping plugin for WordPress is vulnerable to unauthorized modification of data due to a missi... |
| CVE-2023-6637 | MEDIUM | 5.3 | 0.5% | Jan 11, 2024 | The CAOS | Host Google Analytics Locally plugin for WordPress is vulnerable to unauthorized modification of data due to ... |
| CVE-2023-6636 | HIGH | 7.2 | 1.3% | Jan 11, 2024 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m... |
| CVE-2023-6634 | CRITICAL | 9.8 | 8.5% | Jan 11, 2024 | The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now