2023 CVE Vulnerabilities
31,245 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34174 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BBS e-Theme BBS e-Popup plugin <= 2.4.5 versions. |
| CVE-2023-33929 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joaquín Ruiz Easy Admin Menu plugin <= 1.3 versions. |
| CVE-2023-33325 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.30.1 ver... |
| CVE-2023-33320 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mohammad I. Okfie WP-Hijri plugin <= 1.5.1 versions. |
| CVE-2023-33317 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 ... |
| CVE-2023-33210 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nuajik plugin <= 0.1.0 versions. |
| CVE-2023-33208 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gsmith Cookie Monster plugin <= 1.51 versions. |
| CVE-2023-27426 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Notifyvisitors NotifyVisitors plugin <= 1.0 versions. |
| CVE-2023-25462 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP htaccess Control plugin <= 3.5.1 versions. |
| CVE-2023-4600 | MEDIUM | 4.3 | 0.3% | Aug 30, 2023 | The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th... |
| CVE-2023-32962 | MEDIUM | 4.8 | 0.4% | Aug 30, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <... |
| CVE-2023-32802 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 1.9.0 version... |
| CVE-2023-32801 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Composite Products plugin <= 8.7.5 versions. |
| CVE-2023-32793 | MEDIUM | 5.4 | 0.4% | Aug 30, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 2.0... |
| CVE-2023-32746 | MEDIUM | 5.4 | 0.4% | Aug 30, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.45 ... |
| CVE-2023-32742 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions. |
| CVE-2023-32597 | MEDIUM | 6.1 | 0.3% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Gallery plugin <= 1.0.10 ver... |
| CVE-2023-25019 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premio Chaty plugin <= 3.0.9 versions |
| CVE-2023-32740 | MEDIUM | 6.1 | 0.3% | Aug 30, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.8.1 versions. |
| CVE-2023-3136 | MEDIUM | 6.1 | 0.4% | Aug 30, 2023 | The MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up t... |
| CVE-2023-4522 | MEDIUM | 5.3 | 0.9% | Aug 30, 2023 | An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF charac... |
| CVE-2023-4599 | MEDIUM | 5.4 | 0.4% | Aug 30, 2023 | The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in ve... |
| CVE-2023-4597 | MEDIUM | 6.4 | 0.6% | Aug 30, 2023 | The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slimstat' shortcode in... |
| CVE-2023-41266 | MEDIUM | 6.5 | 82.1% | Aug 29, 2023 | A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, Feb... |
| CVE-2023-39559 | MEDIUM | 5.3 | 0.6% | Aug 29, 2023 | AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now