2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-23708 | MEDIUM | 5.4 | 0.4% | May 3, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager ... |
| CVE-2023-1384 | MEDIUM | 6.1 | 0.4% | May 3, 2023 | The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary ... |
| CVE-2023-25798 | MEDIUM | 5.4 | 0.4% | May 3, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin <= 1.1.9 v... |
| CVE-2023-25796 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Include WP BaiDu Submit plugin <= 1.2.1 versions. |
| CVE-2023-22713 | MEDIUM | 5.4 | 0.4% | May 3, 2023 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress Download Manager Gutenberg Blocks by WordPres... |
| CVE-2023-1383 | MEDIUM | 4.3 | 0.3% | May 3, 2023 | An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr ser... |
| CVE-2023-25797 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.... |
| CVE-2023-25792 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin <= 5.0 versions. |
| CVE-2023-25789 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tapfiliate plugin <= 3.0.12 versions. |
| CVE-2023-25787 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wbolt team WP资源下载管理 plugin <= 1.3.9 versions. |
| CVE-2023-25786 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin <= ... |
| CVE-2023-25784 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bon Plan Gratos Sticky Ad Bar plugin <= 1.3.1 versions... |
| CVE-2023-25783 | MEDIUM | 4.8 | 0.4% | May 3, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Moss FireCask Like & Share Button plugin <= 1.1.5... |
| CVE-2023-29839 | MEDIUM | 5.4 | 0.7% | May 3, 2023 | A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows ar... |
| CVE-2023-2468 | MEDIUM | 4.3 | 0.8% | May 3, 2023 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who h... |
| CVE-2023-2467 | MEDIUM | 4.3 | 0.8% | May 3, 2023 | Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to ... |
| CVE-2023-2466 | MEDIUM | 4.3 | 0.8% | May 3, 2023 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the c... |
| CVE-2023-2465 | MEDIUM | 4.3 | 1.0% | May 3, 2023 | Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-ori... |
| CVE-2023-2464 | MEDIUM | 4.3 | 0.6% | May 3, 2023 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinc... |
| CVE-2023-2463 | MEDIUM | 4.3 | 0.9% | May 3, 2023 | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote att... |
| CVE-2023-2462 | MEDIUM | 4.3 | 0.8% | May 3, 2023 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate m... |
| CVE-2023-2459 | MEDIUM | 6.5 | 1.0% | May 3, 2023 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass perm... |
| CVE-2023-27892 | MEDIUM | 5.7 | 0.5% | May 2, 2023 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflo... |
| CVE-2023-26268 | MEDIUM | 5.3 | 1.4% | May 2, 2023 | Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environm... |
| CVE-2023-31434 | MEDIUM | 5.4 | 0.5% | May 2, 2023 | The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in e... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now