2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33478 | CRITICAL | 9.8 | 0.7% | Nov 7, 2023 | RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php. |
| CVE-2023-5709 | MEDIUM | 6.5 | 0.9% | Nov 7, 2023 | The WD WidgetTwitter plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, a... |
| CVE-2023-5703 | MEDIUM | 5.4 | 0.6% | Nov 7, 2023 | The Gift Up Gift Cards for WordPress and WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2023-5669 | MEDIUM | 5.4 | 0.6% | Nov 7, 2023 | The Featured Image Caption plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode ... |
| CVE-2023-5661 | MEDIUM | 5.4 | 0.5% | Nov 7, 2023 | The Social Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialfeed' shortcod... |
| CVE-2023-5660 | MEDIUM | 5.4 | 0.7% | Nov 7, 2023 | The SendPress Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s... |
| CVE-2023-5659 | MEDIUM | 5.4 | 0.5% | Nov 7, 2023 | The Interact: Embed A Quiz On Your Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin... |
| CVE-2023-5577 | MEDIUM | 5.4 | 0.5% | Nov 7, 2023 | The Bitly's plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpbitly' shortcode in al... |
| CVE-2023-5567 | MEDIUM | 5.4 | 0.4% | Nov 7, 2023 | The QR Code Tag plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'qrcodetag' shortcode in versions ... |
| CVE-2023-4888 | MEDIUM | 5.4 | 0.6% | Nov 7, 2023 | The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sfp-page-plugin' shor... |
| CVE-2023-4842 | MEDIUM | 5.4 | 0.6% | Nov 7, 2023 | The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social... |
| CVE-2023-0436 | HIGH | 7.5 | 0.6% | Nov 7, 2023 | The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys... |
| CVE-2023-5975 | MEDIUM | 4.3 | 0.3% | Nov 7, 2023 | The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6... |
| CVE-2023-5743 | MEDIUM | 5.4 | 0.5% | Nov 7, 2023 | The Telephone Number Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'telnumli... |
| CVE-2023-5658 | MEDIUM | 5.4 | 0.5% | Nov 7, 2023 | The WP MapIt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_mapit' shortcode in ... |
| CVE-2023-5532 | MEDIUM | 4.3 | 0.2% | Nov 7, 2023 | The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6... |
| CVE-2023-5507 | MEDIUM | 5.4 | 0.4% | Nov 7, 2023 | The ImageMapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'imagemap' shortcode in versions u... |
| CVE-2023-5506 | MEDIUM | 4.3 | 0.4% | Nov 7, 2023 | The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the... |
| CVE-2023-46819 | MEDIUM | 5.3 | 1.8% | Nov 7, 2023 | Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin. This issue affects Apache ... |
| CVE-2023-47510 | MEDIUM | 6.1 | 0.4% | Nov 7, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPSolutions-HQ WPDBSpringClean plugin <= 1.6 versions. |
| CVE-2023-46851 | MEDIUM | 4.9 | 1.6% | Nov 7, 2023 | Allura Discussion and Allura Forum importing does not restrict URL values specified in attachments. Project administrato... |
| CVE-2023-5076 | MEDIUM | 5.4 | 0.4% | Nov 7, 2023 | The Ziteboard Online Whiteboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ziteboard' sh... |
| CVE-2023-46845 | HIGH | 7.2 | 1.6% | Nov 7, 2023 | EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an... |
| CVE-2023-43886 | HIGH | 7.1 | 0.6% | Nov 7, 2023 | A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to ov... |
| CVE-2023-43885 | HIGH | 8.1 | 0.7% | Nov 7, 2023 | Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attacker... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now