2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-37898MEDIUM5.4Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows an un...
CVE-2023-52884MEDIUM4.4In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to su...
CVE-2023-3352MEDIUM4.3The Smush plugin for WordPress is vulnerable to unauthorized deletion of the resmush list due to a missing capability ch...
CVE-2023-49112MEDIUM6.5Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing on...
CVE-2023-49111MEDIUM6.5For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack ca...
CVE-2023-25646MEDIUM6.4There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attac...
CVE-2023-3204MEDIUM6.5The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, ...
CVE-2023-25697MEDIUM6.3Cross-Site Request Forgery (CSRF) vulnerability in GamiPress.This issue affects GamiPress: from n/a through 2.5.6.
CVE-2023-39310MEDIUM5.4Missing Authorization vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3....
CVE-2023-37872MEDIUM6.5Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to...
CVE-2023-36683MEDIUM6.5Missing Authorization vulnerability in WP SCHEMA PRO Schema Pro.This issue affects Schema Pro: from n/a through 2.7.8.
CVE-2023-41805MEDIUM6.5Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates as...
CVE-2023-39993MEDIUM4.3Missing Authorization vulnerability in Wpmet Elements kit Elementor addons.This issue affects Elements kit Elementor add...
CVE-2023-36512MEDIUM6.5Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5.
CVE-2023-35050MEDIUM5.4Missing Authorization vulnerability in Elementor Elementor Pro.This issue affects Elementor Pro: from n/a through 3.13.0...
CVE-2023-47681MEDIUM6.5Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout M...
CVE-2023-48761MEDIUM6.3Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor...
CVE-2023-50900MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a throu...
CVE-2023-6495MEDIUM4.8The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin...
CVE-2023-6692MEDIUM6.4The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2023-27636MEDIUM5.4Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.
CVE-2023-51376MEDIUM4.3Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Clien...
CVE-2023-51497MEDIUM5.4Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to...
CVE-2023-51496MEDIUM5.3Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Request...
CVE-2023-51495MEDIUM6.5Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Request...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now