2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5602 | HIGH | 8.8 | 0.2% | Oct 20, 2023 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery i... |
| CVE-2023-5534 | MEDIUM | 5.4 | 0.2% | Oct 20, 2023 | The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 ... |
| CVE-2023-5533 | CRITICAL | 9.8 | 0.5% | Oct 20, 2023 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks o... |
| CVE-2023-5337 | MEDIUM | 5.4 | 0.3% | Oct 20, 2023 | The Contact form Form For All plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortco... |
| CVE-2023-5292 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'acfe_for... |
| CVE-2023-5231 | MEDIUM | 5.4 | 0.3% | Oct 20, 2023 | The Magic Action Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to,... |
| CVE-2023-5121 | MEDIUM | 4.8 | 0.3% | Oct 20, 2023 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin set... |
| CVE-2023-5109 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpm... |
| CVE-2023-5086 | MEDIUM | 5.4 | 0.4% | Oct 20, 2023 | The Copy Anything to Clipboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'copy' shortcode in... |
| CVE-2023-5070 | MEDIUM | 6.5 | 1.2% | Oct 20, 2023 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposu... |
| CVE-2023-4999 | HIGH | 8.8 | 0.7% | Oct 20, 2023 | The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-s... |
| CVE-2023-4961 | MEDIUM | 5.4 | 0.5% | Oct 20, 2023 | The Poptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'poptin-form' shortcode in versions up ... |
| CVE-2023-4941 | MEDIUM | 4.3 | 0.5% | Oct 20, 2023 | The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to ... |
| CVE-2023-4926 | MEDIUM | 4.3 | 0.3% | Oct 20, 2023 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is du... |
| CVE-2023-4924 | MEDIUM | 4.3 | 0.3% | Oct 20, 2023 | The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to ... |
| CVE-2023-4923 | MEDIUM | 4.3 | 0.3% | Oct 20, 2023 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is du... |
| CVE-2023-4796 | MEDIUM | 4.3 | 0.6% | Oct 20, 2023 | The Booster for WooCommerce for WordPress is vulnerable to Information Disclosure via the 'wcj_wp_option' shortcode in v... |
| CVE-2023-4668 | HIGH | 7.5 | 0.5% | Oct 20, 2023 | The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 v... |
| CVE-2023-4648 | MEDIUM | 4.8 | 0.3% | Oct 20, 2023 | The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions... |
| CVE-2023-4386 | HIGH | 8.1 | 0.8% | Oct 20, 2023 | The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 ... |
| CVE-2023-4021 | MEDIUM | 4.8 | 0.3% | Oct 20, 2023 | The Modern Events Calendar lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Google API key and... |
| CVE-2023-3998 | MEDIUM | 5.3 | 0.4% | Oct 20, 2023 | The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization chec... |
| CVE-2023-3996 | MEDIUM | 4.8 | 0.5% | Oct 20, 2023 | The ARMember Lite - Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in v... |
| CVE-2023-3869 | MEDIUM | 5.3 | 0.4% | Oct 20, 2023 | The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization chec... |
| CVE-2023-5576 | CRITICAL | 9.3 | 0.8% | Oct 20, 2023 | The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in version... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now