2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44986 | MEDIUM | 4.8 | 0.3% | Oct 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce pl... |
| CVE-2023-44985 | MEDIUM | 5.4 | 0.3% | Oct 16, 2023 | Auth. (contributo+) Stored Cross-Site Scripting (XSS) vulnerability in Cytech BuddyMeet plugin <= 2.2.0 versions. |
| CVE-2023-44984 | MEDIUM | 5.4 | 0.3% | Oct 16, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robin Wilson bbp style pack plugin <= 5.6.7 vers... |
| CVE-2023-44229 | MEDIUM | 4.8 | 0.3% | Oct 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Tiny Carousel Horizontal Slider plugin <... |
| CVE-2023-4457 | HIGH | 7.5 | 0.4% | Oct 16, 2023 | Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, ... |
| CVE-2023-45647 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <= 2.0.10 versio... |
| CVE-2023-45645 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <= 1.25 versions. |
| CVE-2023-45643 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <= 1.0 versions. |
| CVE-2023-45642 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Hassan Ali Snap Pixel plugin <= 1.5.7 versions. |
| CVE-2023-45641 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Caret Inc. Caret Country Access Limit plugin <= 1.0.2 versions. |
| CVE-2023-45639 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Codex-m Sort SearchResult By Title plugin <= 10.0 versions. |
| CVE-2023-3991 | CRITICAL | 9.8 | 2.4% | Oct 16, 2023 | An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially ... |
| CVE-2023-5595 | MEDIUM | 5.5 | 0.3% | Oct 16, 2023 | Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
| CVE-2023-5422 | CRITICAL | 9.1 | 0.3% | Oct 16, 2023 | The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS base... |
| CVE-2023-5421 | MEDIUM | 5.5 | 0.4% | Oct 16, 2023 | An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate th... |
| CVE-2023-4834 | MEDIUM | 4.3 | 0.3% | Oct 16, 2023 | In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an ... |
| CVE-2023-4827 | HIGH | 8.8 | 6.8% | Oct 16, 2023 | The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX actio... |
| CVE-2023-4822 | HIGH | 7.2 | 1.1% | Oct 16, 2023 | Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with se... |
| CVE-2023-4620 | MEDIUM | 6.1 | 0.5% | Oct 16, 2023 | The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowin... |
| CVE-2023-45757 | MEDIUM | 6.1 | 1.0% | Oct 16, 2023 | Security vulnerability in Apache bRPC <=1.6.0 on all platforms allows attackers to inject XSS code to the builtin rpcz p... |
| CVE-2023-45656 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kevin Weber Lazy Load for Videos plugin <= 2.18.2 versions. |
| CVE-2023-45655 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions. |
| CVE-2023-45654 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions. |
| CVE-2023-45653 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions. |
| CVE-2023-45651 | HIGH | 8.8 | 0.2% | Oct 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This is... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now