2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-35998 | MEDIUM | 4.6 | 0.2% | Jun 27, 2023 | A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on ... |
| CVE-2023-2818 | MEDIUM | 5.5 | 0.1% | Jun 27, 2023 | An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to... |
| CVE-2023-2996 | HIGH | 8.8 | 4.8% | Jun 27, 2023 | The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above t... |
| CVE-2023-2877 | HIGH | 8.8 | 22.3% | Jun 27, 2023 | The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in ... |
| CVE-2023-2842 | HIGH | 8.1 | 0.4% | Jun 27, 2023 | The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make... |
| CVE-2023-2795 | MEDIUM | 4.8 | 0.4% | Jun 27, 2023 | The CodeColorer WordPress plugin before 0.10.1 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2023-2744 | HIGH | 7.2 | 2.6% | Jun 27, 2023 | The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/account... |
| CVE-2023-2743 | MEDIUM | 6.1 | 0.5% | Jun 27, 2023 | The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it bac... |
| CVE-2023-2711 | MEDIUM | 4.8 | 0.5% | Jun 27, 2023 | The Ultimate Product Catalog WordPress plugin before 5.2.6 does not sanitise and escape some of its settings, which coul... |
| CVE-2023-2628 | HIGH | 8.8 | 0.4% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJ... |
| CVE-2023-2627 | MEDIUM | 4.3 | 0.2% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, a... |
| CVE-2023-2624 | MEDIUM | 6.1 | 1.1% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the pag... |
| CVE-2023-2623 | MEDIUM | 6.5 | 0.8% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user... |
| CVE-2023-2605 | MEDIUM | 6.1 | 0.5% | Jun 27, 2023 | The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the p... |
| CVE-2023-2601 | CRITICAL | 9.8 | 1.8% | Jun 27, 2023 | The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL ... |
| CVE-2023-2592 | HIGH | 7.2 | 0.9% | Jun 27, 2023 | The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL s... |
| CVE-2023-2580 | MEDIUM | 4.8 | 0.5% | Jun 27, 2023 | The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-p... |
| CVE-2023-2482 | HIGH | 7.2 | 0.9% | Jun 27, 2023 | The Responsive CSS EDITOR WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it... |
| CVE-2023-2326 | MEDIUM | 6.5 | 0.3% | Jun 27, 2023 | The Gravity Forms Google Sheet Connector WordPress plugin before 1.3.5, gsheetconnector-gravityforms-pro WordPress plugi... |
| CVE-2023-2178 | MEDIUM | 4.8 | 0.8% | Jun 27, 2023 | The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could all... |
| CVE-2023-2068 | CRITICAL | 9.8 | 39.6% | Jun 27, 2023 | The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disa... |
| CVE-2023-2032 | CRITICAL | 9.8 | 0.7% | Jun 27, 2023 | The Custom 404 Pro WordPress plugin before 3.8.1 does not properly sanitize database inputs, leading to multiple SQL Inj... |
| CVE-2023-1891 | MEDIUM | 6.1 | 0.5% | Jun 27, 2023 | The Accordion & FAQ WordPress plugin before 1.9.9 does not escape various generated URLs, before outputting them in attr... |
| CVE-2023-1166 | MEDIUM | 4.8 | 0.5% | Jun 27, 2023 | The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-p... |
| CVE-2023-0873 | MEDIUM | 4.8 | 0.5% | Jun 27, 2023 | The Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allo... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now