2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44261 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki Block Plugin Update plugin <= 3.3 versions. |
| CVE-2023-44259 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mediavine Mediavine Control Panel plugin <= 2.10.2 versions. |
| CVE-2023-44257 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Hometory Mang Board WP plugin <= 1.7.6 versions. |
| CVE-2023-41876 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Hardik Kalathiya WP Gallery Metabox plugin <= 1.0.0 versions. |
| CVE-2023-41858 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versio... |
| CVE-2023-41854 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Ltd. WpCentral plugin <= 1.5.7 versions. |
| CVE-2023-41853 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP iCal Availability plugin <= 1.0.3 versions. |
| CVE-2023-41852 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailMunch – Grow your Email List plugin <= 3.1.2 versions. |
| CVE-2023-41851 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Dotsquares WP Custom Post Template <= 1.0 versions. |
| CVE-2023-41850 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Morris Bryant, Ruben Sargsyan Outbound Link Manager plugin <= 1.2 ver... |
| CVE-2023-41730 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions. |
| CVE-2023-41697 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Nikunj Soni Easy WP Cleaner plugin <= 1.9 versions. |
| CVE-2023-41694 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Realbig Team Realbig For WordPress plugin <= 1.0.3 versions. |
| CVE-2023-41684 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Felix Welberg SIS Handball plugin <= 1.0.45 versions. |
| CVE-2023-5468 | MEDIUM | 5.4 | 0.3% | Oct 10, 2023 | The Slick Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dcscf-link' shortcode in ... |
| CVE-2023-5467 | MEDIUM | 5.4 | 0.4% | Oct 10, 2023 | The GEO my WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to,... |
| CVE-2023-45208 | HIGH | 8.8 | 1.5% | Oct 10, 2023 | A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 thr... |
| CVE-2023-44959 | HIGH | 8.8 | 20.5% | Oct 10, 2023 | An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root ... |
| CVE-2023-44827 | HIGH | 8.8 | 0.9% | Oct 10, 2023 | An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows ... |
| CVE-2023-44826 | MEDIUM | 5.4 | 0.4% | Oct 10, 2023 | Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a cra... |
| CVE-2023-42189 | HIGH | 7.5 | 0.8% | Oct 10, 2023 | Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light str... |
| CVE-2023-42477 | MEDIUM | 6.5 | 0.4% | Oct 10, 2023 | SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a v... |
| CVE-2023-42475 | MEDIUM | 4.3 | 0.4% | Oct 10, 2023 | The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker... |
| CVE-2023-42474 | MEDIUM | 5.4 | 0.3% | Oct 10, 2023 | SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The... |
| CVE-2023-42473 | MEDIUM | 5.4 | 0.3% | Oct 10, 2023 | S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticat... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now