Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 194 of 430.
- CVE-2023-47808 WordPress Add Widgets to Page Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47807 WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability
- CVE-2023-47806 WordPress Disable User Login Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47805 WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability
- CVE-2023-47804 Apache OpenOffice: Macro URL arbitrary script execution
- CVE-2023-47803 Path traversal in Camera Firmware
- CVE-2023-47802 Command injection in Camera Firmware
- CVE-2023-47801 Missing authorization in clickstudios:passwordstate
- CVE-2023-47800 Hardcoded credentials in natus:neuroworks eeg
- CVE-2023-47799 Information disclosure in mahara:mahara
- CVE-2023-47798 Liferay Portal's account lockout does not invalidate existing user sessions
- CVE-2023-47797 Liferay Portal XSS with `p_l_back_url_title` on edit content page
- CVE-2023-47795 Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting
- CVE-2023-47793 WordPress Acme Fix Images plugin <= 1.0.0 - Broken Access Control vulnerability
- CVE-2023-47792 WordPress Big File Uploads Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47791 WordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47790 WordPress Pz-LinkCard Plugin <= 2.4.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4779 Cross-site scripting in User Submitted Posts – Enable Users to Submit Posts from the Front End
- CVE-2023-47789 WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47788 WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability
- CVE-2023-47787 WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47786 WordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47785 WordPress LayerSlider Plugin <= 7.7.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47784 WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload
- CVE-2023-47783 WordPress Thrive Theme Builder theme < 3.24.0 - Multiple Authenticated Broken Access Control vulnerability
- CVE-2023-47782 WordPress Thrive Theme Builder theme < 3.24.0 - Authenticated Privilege Escalation vulnerability
- CVE-2023-47781 WordPress Thrive Theme Builder Theme < 3.24.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47780 WordPress EasyAzon – Amazon Associates Affiliate Plugin plugin <= 5.1.0 - Broken Access Control vulnerability
- CVE-2023-4778 Out-of-bounds Read in gpac/gpac
- CVE-2023-47779 WordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open Redirection
- CVE-2023-47778 WordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerability
- CVE-2023-47777 WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability
- CVE-2023-47776 WordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability
- CVE-2023-47775 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47774 WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability
- CVE-2023-47773 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47772 WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47771 WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability
- CVE-2023-47770 WordPress BeTheme theme <= 27.1.1 - Contributor+ Broken Access Control vulnerability
- CVE-2023-4777 Incorrect Permission Assignment on Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier
- CVE-2023-47769 WordPress WP Maintenance plugin <= 6.1.3 - IP Filtering Bypass vulnerability
- CVE-2023-47768 WordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47767 WordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47766 WordPress Post Status Notifier Lite Plugin <= 1.11.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47765 Cross-site request forgery in CodeBard's Patron Button and Widgets for Patreon
- CVE-2023-47764 WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability
- CVE-2023-47763 WordPress WP Custom Admin Interface plugin <= 7.31 - Broken Access Control vulnerability
- CVE-2023-47762 WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability
- CVE-2023-47761 WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability
- CVE-2023-47760 WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability
- CVE-2023-4776 WPSchoolPress < 2.2.5 - Teacher+ SQLi
- CVE-2023-47759 WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-47758 WordPress Multi Step Form Plugin <= 1.7.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47757 WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Control
- CVE-2023-47756 WordPress Welcome Email Editor plugin <= 5.0.6 - Broken Access Control vulnerability
- CVE-2023-47755 WordPress WooCommerce Product Carousel Slider Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47754 WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access Control
- CVE-2023-4775 Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-47747 IBM Db2 denial of service
- CVE-2023-47746 IBM Db2 denial of service
- CVE-2023-47745 IBM MQ Container information disclosure
- CVE-2023-47742 IBM QRadar Suite information dislosure
- CVE-2023-47741 IBM i information disclosure
- CVE-2023-4774 WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-47731 IBM QRadar Suite Software cross-site scripting
- CVE-2023-4773 WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-47728 IBM QRadar Suite Software information disclosure
- CVE-2023-47727 IBM QRadar Suite Software file manipulation
- CVE-2023-47726 IBM QRadar Suite improper input validation
- CVE-2023-47722 IBM API Connect information disclosure
- CVE-2023-4772 Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-47718 IBM Maximo Asset Management cross-site request forgery
- CVE-2023-47717 IBM Security Guardium denial of service
- CVE-2023-47716 IBM FileNet Content Manager privilege escalation
- CVE-2023-47715 IBM Storage Protect Plus Server improper access control
- CVE-2023-47714 IBM Sterling File Gateway cross-site scripting
- CVE-2023-47712 IBM Security Guardium privilege escalation
- CVE-2023-47711 IBM Security Guardium denial of service
- CVE-2023-47710 IBM Security Guardium cross-site scripting
- CVE-2023-4771 Cross-Site Scripting vulnerability in CKSource CKEditor
- CVE-2023-47709 IBM Security Guardium command injection
- CVE-2023-47707 IBM Security Guardium Key Lifecycle Manager cross-site scripting
- CVE-2023-47706 IBM Security Guardium Key Lifecycle Manager file upload
- CVE-2023-47705 IBM Security Guardium Key Lifecycle Manager improper input validation
- CVE-2023-47704 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2023-47703 IBM Security Guardium Key Lifecycle Manager information disclosure
- CVE-2023-47702 IBM Security Guardium Key Lifecycle Manager directory traversal
- CVE-2023-47701 IBM Db2 denial of service
- CVE-2023-47700 IBM Storage Virtualize improper certificate validation
- CVE-2023-4770 Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server
- CVE-2023-47699 IBM Secure Proxy cross-site scripting
- CVE-2023-47698 WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability
- CVE-2023-47697 WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47696 WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47695 WordPress Shortcodes Finder Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47694 WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability
- CVE-2023-47693 WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability
- CVE-2023-47692 WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability
- CVE-2023-47690 WordPress Additional Order Filters for WooCommerce Plugin <= 1.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4769 Server-Side Request Forgery in ManageEngine Desktop Central