2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34005 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Etoile Web Design Front End Users plugin <= 3.2.24 versions. |
| CVE-2023-3179 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could al... |
| CVE-2023-35880 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions. |
| CVE-2023-35096 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions. |
| CVE-2023-35089 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipe... |
| CVE-2023-35038 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in wpexperts.Io WP PDF Generator plugin <= 1.2.2 versions. |
| CVE-2023-31216 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <= 2.6.0 versions. |
| CVE-2023-2959 | HIGH | 7.5 | 0.5% | Jul 17, 2023 | Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Pr... |
| CVE-2023-2636 | HIGH | 8.8 | 3.2% | Jul 17, 2023 | The AN_GradeBook WordPress plugin through 5.0.1 does not properly sanitise and escape a parameter before using it in a S... |
| CVE-2023-2330 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | The Caldera Forms Google Sheets Connector WordPress plugin before 1.3 does not have CSRF check when updating its Access ... |
| CVE-2023-2329 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | The WooCommerce Google Sheet Connector WordPress plugin before 1.3.6 does not have CSRF check when updating its Access C... |
| CVE-2023-2912 | HIGH | 7.5 | 0.5% | Jul 17, 2023 | Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction. |
| CVE-2023-27424 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Korol Yuriy aka Shra Inactive User Deleter plugin <= 1.59 versions. |
| CVE-2023-27606 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Sajjad Hossain WP Reroute Email plugin <= 1.4.6 versions. |
| CVE-2023-23719 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Premmerce plugin <= 1.3.17 versions. |
| CVE-2023-23646 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Album Gallery – WordPress Gallery plugin <= 1.4.9 versions. |
| CVE-2023-22672 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 vers... |
| CVE-2023-2760 | HIGH | 7.6 | 0.4% | Jul 17, 2023 | An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version... |
| CVE-2023-2759 | HIGH | 8.8 | 0.5% | Jul 17, 2023 | A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user t... |
| CVE-2023-30989 | HIGH | 7.8 | 0.2% | Jul 16, 2023 | IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious act... |
| CVE-2023-30988 | HIGH | 7.8 | 0.2% | Jul 16, 2023 | The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A... |
| CVE-2023-38379 | HIGH | 7.5 | 0.6% | Jul 16, 2023 | The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to chan... |
| CVE-2023-3692 | HIGH | 7.2 | 0.8% | Jul 16, 2023 | Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10. |
| CVE-2023-2268 | HIGH | 7.5 | 0.6% | Jul 15, 2023 | Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users. |
| CVE-2023-38349 | HIGH | 8.8 | 0.3% | Jul 15, 2023 | PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now