2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27315 | MEDIUM | 5.5 | 0.2% | Oct 12, 2023 | SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker t... |
| CVE-2023-45068 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Contact Form by Supsystic plugin <= 1.7.27 versions. |
| CVE-2023-45063 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in ReCorp AI Content Writing Assistant (Content Writer, GPT 3 & 4, ChatG... |
| CVE-2023-45060 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com Interactive World Map plugin <= 3.2.0 versions. |
| CVE-2023-45058 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions. |
| CVE-2023-45052 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in dan009 WP Bing Map Pro plugin < 5.0 versions. |
| CVE-2023-45048 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin <= 5.00... |
| CVE-2023-45011 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Igor Buyanov WP Power Stats plugin <= 2.2.3 versions. |
| CVE-2023-44998 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in josecoelho, Randy Hoyt, steveclarkcouk, Vitaliy Kukin, Eric Le Bail, ... |
| CVE-2023-5046 | CRITICAL | 9.8 | 0.6% | Oct 12, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology ... |
| CVE-2023-5045 | CRITICAL | 9.8 | 0.6% | Oct 12, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology ... |
| CVE-2023-43789 | MEDIUM | 5.5 | 0.4% | Oct 12, 2023 | A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger a... |
| CVE-2023-23737 | CRITICAL | 9.8 | 0.6% | Oct 12, 2023 | Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions. |
| CVE-2023-23651 | HIGH | 8.8 | 0.6% | Oct 12, 2023 | Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP Google Analytics Extension plugin <= 4.0.4 versions. |
| CVE-2023-5556 | MEDIUM | 6.1 | 1.2% | Oct 12, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremises prior to 3194. |
| CVE-2023-5555 | MEDIUM | 6.1 | 0.4% | Oct 12, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4. |
| CVE-2023-5554 | CRITICAL | 9.8 | 0.2% | Oct 12, 2023 | Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16... |
| CVE-2023-45047 | HIGH | 8.8 | 0.2% | Oct 12, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in LeadSquared, Inc LeadSquared Suite plugin <= 0.7.4 versions. |
| CVE-2023-5470 | MEDIUM | 5.4 | 0.5% | Oct 12, 2023 | The Etsy Shop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etsy-shop' shortcode in versions up... |
| CVE-2023-32724 | HIGH | 8.8 | 0.6% | Oct 12, 2023 | Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory ... |
| CVE-2023-32723 | CRITICAL | 9.1 | 0.6% | Oct 12, 2023 | Request to LDAP is sent before user permissions are checked. |
| CVE-2023-32722 | HIGH | 7.8 | 0.7% | Oct 12, 2023 | The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open. |
| CVE-2023-32721 | MEDIUM | 5.4 | 0.6% | Oct 12, 2023 | A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before U... |
| CVE-2023-5531 | MEDIUM | 4.3 | 0.3% | Oct 12, 2023 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, a... |
| CVE-2023-40833 | CRITICAL | 9.8 | 0.7% | Oct 12, 2023 | An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSe... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now