Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 163 of 430.
- CVE-2023-52194 WordPress oEmbed Gist Plugin <= 4.9.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52193 WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52192 WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52191 WordPress Infogram Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52190 WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure
- CVE-2023-52189 WordPress Ideal Interactive Map Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52188 WordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52187 WordPress Image Source Control Plugin <= 2.17.0 is vulnerable to Sensitive Data Exposure
- CVE-2023-52186 WordPress WooCommerce Product Vendors plugin <= 2.2.2 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-52185 WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure
- CVE-2023-52184 WordPress WP Job Portal Plugin <= 2.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52183 WordPress WordPress Backup & Migration plugin <= 1.4.3 - Broken Access Control vulnerability
- CVE-2023-52182 WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection
- CVE-2023-52181 WordPress Theme per user Plugin <= 1.0.1 is vulnerable to PHP Object Injection
- CVE-2023-52180 WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection
- CVE-2023-5218 Use after free in Chrome
- CVE-2023-52179 WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability
- CVE-2023-52178 WordPress WP Affiliate Disclosure Plugin <= 1.2.7 is vulnerable to Cross-Site Scripting (XSS)
- CVE-2023-52177 WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability
- CVE-2023-52176 WordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability
- CVE-2023-52175 WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52174 Memory corruption in xnview:xnview classic
- CVE-2023-52173 Memory corruption in xnview:xnview classic
- CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow
- CVE-2023-52169 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer.
- CVE-2023-52168 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite
- CVE-2023-52164 access_device.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read.
- CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization
- CVE-2023-52162 Mercusys MW325R EU V3 (Firmware MW325R(EU)_V3_1.11.0 Build 221019) is vulnerable to a stack-based buffer overflow, which could allow an atta
- CVE-2023-52161 Auth bypass in intel:inet wireless daemon
- CVE-2023-52160 Auth bypass in debian:debian linux
- CVE-2023-52159 Memory corruption in bizdelnick:gross
- CVE-2023-52155 SQL injection in sigb:pmb
- CVE-2023-52154 File upload in sigb:pmb
- CVE-2023-52153 SQL injection in sigb:pmb
- CVE-2023-52152 Memory corruption in cybergarage:mupnp for c
- CVE-2023-52151 WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure
- CVE-2023-52150 WordPress Dynamic Content for Elementor Plugin < 2.12.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-5215 Libnbd: crash or misbehaviour when nbd server returns an unexpected block size
- CVE-2023-52149 WordPress Floating Button Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52148 WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure
- CVE-2023-52147 Information disclosure in All In One WP Security & Firewall
- CVE-2023-52146 WordPress 404 Solution Plugin <= 2.33.0 is vulnerable to Sensitive Data Exposure
- CVE-2023-52145 WordPress Republish Old Posts Plugin <= 1.21 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52144 WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerability
- CVE-2023-52143 WordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure
- CVE-2023-52142 WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection
- CVE-2023-5214 CVE-2023-5214 - Privilege Escalation in Puppet Bolt
- CVE-2023-52139 Misskey vulnerable to improper authorization when accessing with third-party application
- CVE-2023-52138 Path traversal via crafted cpio archives in Engrampa archivers
- CVE-2023-52137 GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames
- CVE-2023-52136 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52135 WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection
- CVE-2023-52134 WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection
- CVE-2023-52133 WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection
- CVE-2023-52132 WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injection
- CVE-2023-52131 WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection
- CVE-2023-52130 WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52129 WordPress teachPress Plugin <= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52128 WordPress White Label Plugin <= 2.9.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52127 WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52126 WordPress Send Users Email Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure
- CVE-2023-52125 WordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52124 WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52123 WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52122 WordPress Simple Job Board Plugin <= 2.10.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52121 WordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52120 WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-5212 Path traversal in WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
- CVE-2023-52119 WordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52118 WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52117 WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerability
- CVE-2023-52116 Missing authorization in EMUI
- CVE-2023-52115 Use after free in HarmonyOS
- CVE-2023-52114 Information disclosure in EMUI
- CVE-2023-52113 Denial of service in EMUI
- CVE-2023-52112 Missing authorization in EMUI
- CVE-2023-52111 Auth bypass in EMUI
- CVE-2023-52110 Memory corruption in HarmonyOS
- CVE-2023-5211 Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
- CVE-2023-52109 Security feature bypass in EMUI
- CVE-2023-52108 Denial of service in EMUI
- CVE-2023-52107 Missing authorization in EMUI
- CVE-2023-52106 Missing authorization in EMUI
- CVE-2023-52105 Privilege escalation in HarmonyOS
- CVE-2023-52104 Other in EMUI
- CVE-2023-52103 Memory corruption in EMUI
- CVE-2023-52102 Other in EMUI
- CVE-2023-52101 Information disclosure in EMUI
- CVE-2023-52100 Missing authorization in HarmonyOS
- CVE-2023-5210 AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
- CVE-2023-52099 Security feature bypass in EMUI
- CVE-2023-52098 Denial of service in EMUI
- CVE-2023-52097 Security feature bypass in EMUI
- CVE-2023-52096 Other in steve-community:ocpp-jaxb
- CVE-2023-52094 Privilege escalation in Trend Micro Apex One
- CVE-2023-52093 Privilege escalation in Trend Micro Apex One
- CVE-2023-52092 Privilege escalation in Trend Micro Apex One
- CVE-2023-52091 Privilege escalation in Trend Micro Apex One
- CVE-2023-52090 Privilege escalation in Trend Micro Apex One