2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34024 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Guillemant David WP Full Auto Tags Manager plugin <= 2.2 versions. |
| CVE-2023-32794 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions. |
| CVE-2023-32745 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.1 versions. |
| CVE-2023-32744 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Recommendations plugin <= 2.3.0 versions. |
| CVE-2023-32739 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Web_Trendy WP Custom Cursors | WordPress Cursor Plugin plugin < 3.2 v... |
| CVE-2023-32602 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in LOKALYZE CALL ME NOW plugin <= 3.0 versions. |
| CVE-2023-32594 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin <= 5.1.5 versions. |
| CVE-2023-5551 | LOW | 3.3 | 0.3% | Nov 9, 2023 | Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other gr... |
| CVE-2023-5550 | CRITICAL | 9.8 | 1.4% | Nov 9, 2023 | In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who a... |
| CVE-2023-5549 | MEDIUM | 5.3 | 0.6% | Nov 9, 2023 | Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a par... |
| CVE-2023-5548 | MEDIUM | 5.3 | 0.3% | Nov 9, 2023 | Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection. |
| CVE-2023-5547 | MEDIUM | 6.1 | 0.5% | Nov 9, 2023 | The course upload preview contained an XSS risk for users uploading unsafe data. |
| CVE-2023-5546 | MEDIUM | 5.4 | 1.2% | Nov 9, 2023 | ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. |
| CVE-2023-5545 | MEDIUM | 5.3 | 0.5% | Nov 9, 2023 | H5P metadata automatically populated the author with the user's username, which could be sensitive information. |
| CVE-2023-5544 | MEDIUM | 5.4 | 0.5% | Nov 9, 2023 | Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR ris... |
| CVE-2023-5542 | MEDIUM | 4.3 | 0.4% | Nov 9, 2023 | Students in "Only see own membership" groups could see other students in the group, which should be hidden. |
| CVE-2023-5541 | MEDIUM | 6.1 | 0.5% | Nov 9, 2023 | The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content. |
| CVE-2023-5540 | HIGH | 8.8 | 1.9% | Nov 9, 2023 | A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and ma... |
| CVE-2023-5539 | HIGH | 8.8 | 1.9% | Nov 9, 2023 | A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and m... |
| CVE-2023-39198 | MEDIUM | 6.4 | 0.4% | Nov 9, 2023 | A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the q... |
| CVE-2023-34177 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kenth Hagström WP-Cache.Com plugin <= 1.1.1 versions. |
| CVE-2023-34171 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions. |
| CVE-2023-34169 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin <= 3.1.2 vers... |
| CVE-2023-34033 | HIGH | 8.8 | 0.3% | Nov 9, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Malinky Ajax Pagination and Infinite Scroll plugin <= 2.0.1 versions. |
| CVE-2023-6054 | CRITICAL | 9.8 | 0.9% | Nov 9, 2023 | A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now