2023 CVE Vulnerabilities

31,401 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-45689MEDIUM6.5Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux al...
CVE-2023-45688MEDIUM4.3Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an auth...
CVE-2023-45687HIGH8.8A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allo...
CVE-2023-45686HIGH7.2Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP server...
CVE-2023-45685CRITICAL9.1Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers...
CVE-2023-20198CRITICAL10Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS...
CVE-2023-46087HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.
CVE-2023-5575MEDIUM6.5 Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker...
CVE-2023-46066MEDIUM5.4Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin <=...
CVE-2023-44987MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Timely - Appointment software Timely Booking Button pl...
CVE-2023-45836HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions.
CVE-2023-45831HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin <...
CVE-2023-45763HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Taggbox plugin <= 2.9 versions.
CVE-2023-45753HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Gilles Dumas which template file plugin <= 4.6.0 versions.
CVE-2023-45752HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in 10 Quality Post Gallery plugin <= 2.3.12 versions.
CVE-2023-45749HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <= 3.2.4 vers...
CVE-2023-45748HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions.
CVE-2023-44986MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce pl...
CVE-2023-44985MEDIUM5.4Auth. (contributo+) Stored Cross-Site Scripting (XSS) vulnerability in Cytech BuddyMeet plugin <= 2.2.0 versions.
CVE-2023-44984MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robin Wilson bbp style pack plugin <= 5.6.7 vers...
CVE-2023-44229MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny Carousel Horizontal Slider plugin <...
CVE-2023-4457HIGH7.5Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, ...
CVE-2023-45647HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versio...
CVE-2023-45645HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <= 1.25 versions.
CVE-2023-45643HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 versions.

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now