2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2122 | MEDIUM | 6.1 | 0.9% | Aug 16, 2023 | The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitise and escape the iowd_tabs_active parameter ... |
| CVE-2023-1977 | HIGH | 8.8 | 0.8% | Aug 16, 2023 | The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for... |
| CVE-2023-1465 | MEDIUM | 6.1 | 0.5% | Aug 16, 2023 | The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, lea... |
| CVE-2023-1110 | MEDIUM | 5.4 | 0.5% | Aug 16, 2023 | The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes b... |
| CVE-2023-0579 | HIGH | 8.8 | 0.9% | Aug 16, 2023 | The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them... |
| CVE-2023-0551 | MEDIUM | 5.4 | 0.3% | Aug 16, 2023 | The REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action... |
| CVE-2023-0274 | MEDIUM | 5.4 | 0.5% | Aug 16, 2023 | The URL Params WordPress plugin before 2.5 does not validate and escape some of its shortcode attributes before outputti... |
| CVE-2023-0058 | MEDIUM | 6.1 | 0.2% | Aug 16, 2023 | The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when creating and editing its shortcode, and is m... |
| CVE-2023-4241 | HIGH | 7.5 | 0.6% | Aug 16, 2023 | lol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affecte... |
| CVE-2023-30871 | MEDIUM | 6.1 | 0.4% | Aug 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PT Woo Plugins (by Webdados) Stock Exporter for WooCommerc... |
| CVE-2023-30779 | MEDIUM | 6.1 | 0.4% | Aug 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin <= 1.5.51 versio... |
| CVE-2023-30786 | MEDIUM | 4.8 | 0.4% | Aug 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin <= 1.3.3 versions... |
| CVE-2023-30785 | MEDIUM | 6.1 | 0.4% | Aug 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin <= 1.21 versions... |
| CVE-2023-30784 | MEDIUM | 5.4 | 0.4% | Aug 16, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kaya Studio Kaya QR Code Generator plugin <= 1.5... |
| CVE-2023-30782 | MEDIUM | 6.1 | 0.4% | Aug 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.5 versions. |
| CVE-2023-30473 | MEDIUM | 6.1 | 0.4% | Aug 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov YML for Yandex Market plugin <= 3.10.7 vers... |
| CVE-2023-39507 | MEDIUM | 6.1 | 0.3% | Aug 16, 2023 | Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a... |
| CVE-2023-4374 | MEDIUM | 4.3 | 0.5% | Aug 16, 2023 | The WP Remote Users Sync plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a... |
| CVE-2023-3958 | MEDIUM | 5.4 | 0.5% | Aug 16, 2023 | The WP Remote Users Sync plugin for WordPress is vulnerable to Server Side Request Forgery via the 'notify_ping_remote' ... |
| CVE-2023-26140 | MEDIUM | 6.1 | 0.5% | Aug 16, 2023 | Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting (XSS) via embedded link... |
| CVE-2023-39851 | CRITICAL | 9.8 | 0.7% | Aug 15, 2023 | webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php. NOTE:... |
| CVE-2023-39850 | CRITICAL | 9.8 | 0.7% | Aug 15, 2023 | Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parame... |
| CVE-2023-39849 | — | — | — | Aug 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-20564 | MEDIUM | 6.7 | 0.3% | Aug 15, 2023 | Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privil... |
| CVE-2023-20560 | MEDIUM | 4.4 | 0.2% | Aug 15, 2023 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may allow a privi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now