2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-25703MEDIUM5.3Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows ...
CVE-2023-25486MEDIUM4.3Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Le...
CVE-2023-25469MEDIUM5.4Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectly Configured Access ...
CVE-2023-25455MEDIUM5.3Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedI...
CVE-2023-25454MEDIUM6.5Missing Authorization vulnerability in Nate Reist Protected Posts Logout Button allows Exploiting Incorrectly Configured...
CVE-2023-25067MEDIUM4.3Missing Authorization vulnerability in Noah Hearle, Design Extreme We’re Open! allows Exploiting Incorrectly Configured ...
CVE-2023-25060MEDIUM5.3Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Album and Image Gallery plus Lightbox allows E...
CVE-2023-25048MEDIUM5.3Missing Authorization vulnerability in Fantastic Plugins Fantastic Content Protector Free allows Exploiting Incorrectly ...
CVE-2023-25037MEDIUM4.3Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured...
CVE-2023-25035MEDIUM6.5Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Con...
CVE-2023-25026MEDIUM4.3Missing Authorization vulnerability in PayPal PayPal Brasil para WooCommerce allows Exploiting Incorrectly Configured Ac...
CVE-2023-23986MEDIUM5.4Missing Authorization vulnerability in Noah Hearle, Design Extreme Reviews and Rating – Google My Business allows Exploi...
CVE-2023-23975MEDIUM5.3Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Con...
CVE-2023-23893MEDIUM5.3Missing Authorization vulnerability in Igor Benic Simple Giveaways allows Exploiting Incorrectly Configured Access Contr...
CVE-2023-23887MEDIUM5.3Missing Authorization vulnerability in Shaon Easy Google Analytics for WordPress allows Exploiting Incorrectly Configure...
CVE-2023-23886MEDIUM5.4Missing Authorization vulnerability in mg12 WP-RecentComments allows Exploiting Incorrectly Configured Access Control Se...
CVE-2023-23868MEDIUM5.4Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured ...
CVE-2023-23823MEDIUM4.3Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Acce...
CVE-2023-23726MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in Tickera.com Tickera allows Cross Site Request Forgery.This issue affe...
CVE-2023-23725MEDIUM4.3Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Contr...
CVE-2023-23716MEDIUM4.3Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Ac...
CVE-2023-22708MEDIUM4.3Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured A...
CVE-2023-6978MEDIUM6.1The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'comp...
CVE-2023-52944MEDIUM4.3Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289...
CVE-2023-52943MEDIUM4.3Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now