2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1331 | MEDIUM | 6.5 | 0.3% | Apr 17, 2023 | The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attac... |
| CVE-2023-1325 | MEDIUM | 5.4 | 0.5% | Apr 17, 2023 | The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes... |
| CVE-2023-1282 | MEDIUM | 6.1 | 0.5% | Apr 17, 2023 | The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Mu... |
| CVE-2023-1274 | MEDIUM | 6.5 | 0.9% | Apr 17, 2023 | The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate so... |
| CVE-2023-0889 | MEDIUM | 6.5 | 0.3% | Apr 17, 2023 | Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and do... |
| CVE-2023-0764 | MEDIUM | 5.4 | 0.4% | Apr 17, 2023 | The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, le... |
| CVE-2023-0374 | MEDIUM | 5.4 | 0.4% | Apr 17, 2023 | The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting ... |
| CVE-2023-0367 | MEDIUM | 5.4 | 0.4% | Apr 17, 2023 | The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate an... |
| CVE-2023-2109 | MEDIUM | 6.1 | 0.4% | Apr 17, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0. |
| CVE-2023-29508 | MEDIUM | 5.4 | 0.4% | Apr 16, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can... |
| CVE-2023-29506 | MEDIUM | 6.1 | 1.7% | Apr 16, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some c... |
| CVE-2023-30772 | MEDIUM | 6.4 | 0.5% | Apr 16, 2023 | The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c... |
| CVE-2023-29206 | MEDIUM | 5.4 | 0.9% | Apr 15, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. There was no check in the author... |
| CVE-2023-29205 | MEDIUM | 5.4 | 0.6% | Apr 15, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systemat... |
| CVE-2023-29204 | MEDIUM | 6.1 | 1.8% | Apr 15, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the exi... |
| CVE-2023-29203 | MEDIUM | 5.3 | 0.7% | Apr 15, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users... |
| CVE-2023-2104 | MEDIUM | 5.4 | 0.4% | Apr 15, 2023 | Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0. |
| CVE-2023-2103 | MEDIUM | 5.4 | 0.5% | Apr 15, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. |
| CVE-2023-2102 | MEDIUM | 4.8 | 0.5% | Apr 15, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. |
| CVE-2023-2101 | MEDIUM | 6.5 | 0.8% | Apr 15, 2023 | A vulnerability, which was classified as problematic, has been found in moxi624 Mogu Blog v2 up to 5.2. This issue affec... |
| CVE-2023-2100 | MEDIUM | 6.1 | 0.6% | Apr 15, 2023 | A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulner... |
| CVE-2023-2099 | MEDIUM | 6.1 | 0.7% | Apr 15, 2023 | A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This a... |
| CVE-2023-2098 | MEDIUM | 6.1 | 0.6% | Apr 15, 2023 | A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been rated as problematic. Aff... |
| CVE-2023-2094 | MEDIUM | 6.3 | 0.8% | Apr 15, 2023 | A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This ... |
| CVE-2023-27572 | MEDIUM | 6.1 | 0.8% | Apr 15, 2023 | An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. A reflected XSS vulner... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now