2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-29236MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Outdoor theme <= 3.9.6 versions.
CVE-2023-28993MEDIUM6.1Unauth.  Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On Line plugin <= 4.6.1 ver...
CVE-2023-25716MEDIUM4.8Auth (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gqevu6bsiz Announce from the Dashboard plugin <= 1.5.1 ...
CVE-2023-25049MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPre...
CVE-2023-25041MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions.
CVE-2023-25031MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugi...
CVE-2023-25020MEDIUM6.1Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2....
CVE-2023-23994MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin <= 1.6.1 ve...
CVE-2023-23885MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 v...
CVE-2023-25027MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Chained Quiz plugin <= 1.3.2.5 versions.
CVE-2023-25024MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions.
CVE-2023-25023MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saleswonder.Biz Webinar ignition plugin <= 2.14.2 vers...
CVE-2023-25022MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.8 versions.
CVE-2023-25046MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.2 vers...
CVE-2023-24398MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Coming Soon Page plugin <= 1.0...
CVE-2023-25061MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter...
CVE-2023-25059MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts ...
CVE-2023-24402MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plug...
CVE-2023-1937MEDIUM4.3A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Affected is an unknown function o...
CVE-2023-1931MEDIUM4.3The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on t...
CVE-2023-1930MEDIUM4.3The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check ...
CVE-2023-1929MEDIUM4.3The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability ch...
CVE-2023-1928MEDIUM4.3The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability ch...
CVE-2023-1927MEDIUM4.3The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, ...
CVE-2023-29465MEDIUM5.5SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local use...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now