2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50823 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wipeout Media CSS ... |
| CVE-2023-50822 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Currency.Wiki Curr... |
| CVE-2023-50724 | MEDIUM | 6.1 | 0.5% | Dec 21, 2023 | Resque (pronounced like "rescue") is a Redis-backed library for creating background jobs, placing those jobs on multiple... |
| CVE-2023-50377 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AB-WP Simple Count... |
| CVE-2023-50119 | — | — | — | Dec 21, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-45292. Reason: This record is a reservation duplicate ... |
| CVE-2023-48116 | MEDIUM | 5.4 | 0.4% | Dec 21, 2023 | SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appoint... |
| CVE-2023-48115 | MEDIUM | 5.4 | 0.4% | Dec 21, 2023 | SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skip... |
| CVE-2023-48114 | MEDIUM | 5.4 | 0.4% | Dec 21, 2023 | SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG docu... |
| CVE-2023-47527 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sajjad Hossain Sag... |
| CVE-2023-47525 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Event Mo... |
| CVE-2023-22674 | HIGH | 8.8 | 0.3% | Dec 21, 2023 | Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Hal Gatewood Dashicons + Custom Post Types.Thi... |
| CVE-2023-6145 | CRITICAL | 9.8 | 0.5% | Dec 21, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Info... |
| CVE-2023-6122 | MEDIUM | 6.1 | 0.4% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in İstanbul Soft Info... |
| CVE-2023-49162 | HIGH | 7.5 | 0.4% | Dec 21, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BigCommerce BigCommerce For WordPress.This i... |
| CVE-2023-48288 | HIGH | 7.5 | 0.5% | Dec 21, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitmen... |
| CVE-2023-2487 | HIGH | 7.5 | 0.5% | Dec 21, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Smackcoders Export All Posts, Products, Orde... |
| CVE-2023-28421 | HIGH | 7.5 | 0.5% | Dec 21, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugi... |
| CVE-2023-49826 | CRITICAL | 9.8 | 0.6% | Dec 21, 2023 | Deserialization of Untrusted Data vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce Wor... |
| CVE-2023-49778 | CRITICAL | 9.8 | 0.8% | Dec 21, 2023 | Deserialization of Untrusted Data vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a th... |
| CVE-2023-49762 | HIGH | 7.5 | 0.5% | Dec 21, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AppMySite AppMySite – Create an app with the... |
| CVE-2023-32242 | CRITICAL | 9.8 | 0.8% | Dec 21, 2023 | Deserialization of Untrusted Data vulnerability in xtemos WoodMart - Multipurpose WooCommerce Theme.This issue affects W... |
| CVE-2023-5594 | HIGH | 8.6 | 0.4% | Dec 21, 2023 | Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certifi... |
| CVE-2023-51656 | CRITICAL | 9.8 | 1.0% | Dec 21, 2023 | Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.1... |
| CVE-2023-50481 | HIGH | 7.5 | 0.3% | Dec 21, 2023 | An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak en... |
| CVE-2023-50477 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.j... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now