2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6632 | MEDIUM | 6.1 | 0.5% | Jan 11, 2024 | The Happy Addons for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via DOM in all versi... |
| CVE-2023-6624 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2023-6598 | MEDIUM | 4.3 | 0.4% | Jan 11, 2024 | The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec... |
| CVE-2023-6583 | HIGH | 7.2 | 0.8% | Jan 11, 2024 | The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up t... |
| CVE-2023-6582 | MEDIUM | 5.3 | 0.5% | Jan 11, 2024 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up... |
| CVE-2023-6567 | HIGH | 7.5 | 51.4% | Jan 11, 2024 | The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versio... |
| CVE-2023-6561 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the featured im... |
| CVE-2023-6558 | HIGH | 7.2 | 1.4% | Jan 11, 2024 | The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficie... |
| CVE-2023-6556 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripti... |
| CVE-2023-6504 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2023-6496 | MEDIUM | 5.3 | 0.5% | Jan 11, 2024 | The Manage Notification E-mails plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and i... |
| CVE-2023-6369 | MEDIUM | 5.4 | 0.5% | Jan 11, 2024 | The Export WP Page to Static HTML/CSS plugin for WordPress is vulnerable to unauthorized access of data and modification... |
| CVE-2023-6316 | CRITICAL | 9.8 | 1.4% | Jan 11, 2024 | The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in ... |
| CVE-2023-6266 | HIGH | 7.5 | 2.1% | Jan 11, 2024 | The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file... |
| CVE-2023-6220 | CRITICAL | 9.8 | 1.4% | Jan 11, 2024 | The Piotnet Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation ... |
| CVE-2023-5691 | MEDIUM | 4.8 | 0.3% | Jan 11, 2024 | The Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versio... |
| CVE-2023-5504 | HIGH | 8.7 | 0.9% | Jan 11, 2024 | The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the L... |
| CVE-2023-52032 | CRITICAL | 9.8 | 1.6% | Jan 11, 2024 | TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via th... |
| CVE-2023-52031 | CRITICAL | 9.8 | 1.5% | Jan 11, 2024 | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the ... |
| CVE-2023-52030 | CRITICAL | 9.8 | 1.5% | Jan 11, 2024 | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the ... |
| CVE-2023-52029 | CRITICAL | 9.8 | 1.7% | Jan 11, 2024 | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the ... |
| CVE-2023-52028 | CRITICAL | 9.8 | 1.7% | Jan 11, 2024 | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the ... |
| CVE-2023-52027 | CRITICAL | 9.8 | 1.7% | Jan 11, 2024 | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the ... |
| CVE-2023-4962 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Video PopUp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'video_popup' shortcode in version... |
| CVE-2023-4960 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The WCFM Marketplace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wcfm_stores' shortcode in ve... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now