2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45767 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wokamoto Simple Tweet plugin <= 1.4.0.2 versions. |
| CVE-2023-45764 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Scroll post excerpt plugin <= 8.0 versio... |
| CVE-2023-45761 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Joovii Sendle Shipping Plugin plugin <= 5.13 versions. |
| CVE-2023-45759 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Peter Keung Peter’s Custom Anti-Spam plugin <= 3.2.2 versi... |
| CVE-2023-45758 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Amministrazione Trasparente plugin <= 8.0... |
| CVE-2023-45756 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline – Application Form Builder and Ma... |
| CVE-2023-45755 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BuddyBoss BuddyPress Global Search plugin <= 1.2.1 ver... |
| CVE-2023-45754 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Sol... |
| CVE-2023-45750 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in POSIMYTH Nexter Extension plugin <= 2.0.3 versions. |
| CVE-2023-45747 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Syed Balkhi WP Lightbox 2 plugin <= 3.0.6.5 versions. |
| CVE-2023-45646 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Henryholtgeerts PDF Block plugin <= 1.1.0 versio... |
| CVE-2023-45644 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 ... |
| CVE-2023-45640 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike – Most Advanced WordPress Ma... |
| CVE-2023-45637 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime – Events Calendar, Bookings and Tick... |
| CVE-2023-45634 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Biztechc Copy or Move Comments plugin <= 5.0.4 versions. |
| CVE-2023-45555 | HIGH | 7.8 | 0.9% | Oct 25, 2023 | File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the... |
| CVE-2023-45554 | CRITICAL | 9.8 | 1.5% | Oct 25, 2023 | File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the i... |
| CVE-2023-45321 | HIGH | 8.8 | 0.1% | Oct 25, 2023 | The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address... |
| CVE-2023-45220 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address),... |
| CVE-2023-44794 | CRITICAL | 9.8 | 1.0% | Oct 25, 2023 | An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payl... |
| CVE-2023-44769 | MEDIUM | 5.4 | 0.7% | Oct 25, 2023 | A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code ... |
| CVE-2023-44767 | MEDIUM | 4.8 | 0.5% | Oct 25, 2023 | A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content. |
| CVE-2023-43961 | HIGH | 8.8 | 0.8% | Oct 25, 2023 | An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted reque... |
| CVE-2023-43795 | CRITICAL | 9.8 | 67.7% | Oct 25, 2023 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC... |
| CVE-2023-43510 | MEDIUM | 6.3 | 0.6% | Oct 25, 2023 | A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now