2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46990 | CRITICAL | 9.8 | 1.5% | Nov 20, 2023 | Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a c... |
| CVE-2023-38823 | CRITICAL | 9.8 | 1.2% | Nov 20, 2023 | Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to exec... |
| CVE-2023-5799 | MEDIUM | 5.4 | 0.5% | Nov 20, 2023 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing ... |
| CVE-2023-5652 | CRITICAL | 9.8 | 63.7% | Nov 20, 2023 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not esca... |
| CVE-2023-5651 | MEDIUM | 5.4 | 0.3% | Nov 20, 2023 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensu... |
| CVE-2023-5640 | CRITICAL | 9.8 | 1.0% | Nov 20, 2023 | The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statem... |
| CVE-2023-5610 | MEDIUM | 5.4 | 0.4% | Nov 20, 2023 | The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user ... |
| CVE-2023-5609 | MEDIUM | 6.1 | 0.4% | Nov 20, 2023 | The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it... |
| CVE-2023-5509 | MEDIUM | 5.4 | 0.5% | Nov 20, 2023 | The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in use... |
| CVE-2023-5343 | MEDIUM | 4.8 | 0.5% | Nov 20, 2023 | The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high pr... |
| CVE-2023-5340 | CRITICAL | 9.8 | 1.2% | Nov 20, 2023 | The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX actio... |
| CVE-2023-5140 | MEDIUM | 6.1 | 0.4% | Nov 20, 2023 | The Bonus for Woo WordPress plugin before 5.8.3 does not sanitise and escape some parameters before outputting them back... |
| CVE-2023-5119 | MEDIUM | 4.8 | 0.5% | Nov 20, 2023 | The Forminator WordPress plugin before 1.27.0 does not properly sanitize the redirect-url field in the form submission s... |
| CVE-2023-4970 | MEDIUM | 4.8 | 0.4% | Nov 20, 2023 | The PubyDoc WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could allow high pri... |
| CVE-2023-4824 | HIGH | 8.8 | 0.4% | Nov 20, 2023 | The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow atta... |
| CVE-2023-4808 | MEDIUM | 4.8 | 0.4% | Nov 20, 2023 | The WP Post Popup WordPress plugin through 3.7.3 does not sanitise and escape some of its inputs, which could allow high... |
| CVE-2023-4799 | MEDIUM | 5.4 | 0.4% | Nov 20, 2023 | The Magic Embeds WordPress plugin before 3.1.2 does not validate and escape some of its shortcode attributes before outp... |
| CVE-2023-48309 | MEDIUM | 5.3 | 0.7% | Nov 20, 2023 | NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the defau... |
| CVE-2023-48300 | MEDIUM | 5.4 | 0.5% | Nov 20, 2023 | The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored ... |
| CVE-2023-48293 | HIGH | 8.8 | 0.4% | Nov 20, 2023 | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-si... |
| CVE-2023-38885 | HIGH | 8.8 | 0.4% | Nov 20, 2023 | OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole ap... |
| CVE-2023-38884 | HIGH | 7.5 | 0.9% | Nov 20, 2023 | An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows ... |
| CVE-2023-38883 | MEDIUM | 6.1 | 0.6% | Nov 20, 2023 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic all... |
| CVE-2023-38882 | MEDIUM | 6.1 | 0.6% | Nov 20, 2023 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic all... |
| CVE-2023-38881 | MEDIUM | 6.1 | 0.6% | Nov 20, 2023 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic all... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now