Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 215 of 430.
- CVE-2023-45008 WordPress Comment Reply Email Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45007 WordPress Fotomoto Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45006 WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45005 WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45004 WordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45003 WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45002 WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability
- CVE-2023-45001 WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection
- CVE-2023-45000 WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability
- CVE-2023-4500 Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-44999 WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-44998 WordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44997 WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44996 WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44995 WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44994 WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44993 WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44991 WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure
- CVE-2023-44990 WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4499 Weak cryptography in HP ThinUpdate
- CVE-2023-44989 WordPress CF7 Google Sheets Connector plugin <= 5.0.5 - Sensitive Data Exposure via Debug Log vulnerability
- CVE-2023-44988 WordPress WP Custom Admin Interface plugin <= 7.32 - Broken Access Control vulnerability
- CVE-2023-44987 WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44986 WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44985 WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44984 WordPress bbp style pack Plugin <= 5.6.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44983 WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure
- CVE-2023-44982 WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure
- CVE-2023-44981 Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication
- CVE-2023-4498 Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router
- CVE-2023-44976 Privilege escalation in Rentdrv2
- CVE-2023-44974 File upload in emlog:emlog
- CVE-2023-44973 File upload in emlog:emlog
- CVE-2023-4497 Easy Chat Server XSS vulnerability
- CVE-2023-44962 File upload in koha-community:koha library software
- CVE-2023-44961 SQL injection in koha-community:koha library software
- CVE-2023-4496 Easy Chat Server XSS vulnerability
- CVE-2023-44959 Command injection in dlink:dsl-3782 firmware
- CVE-2023-44954 Cross-site scripting in bigtreecms:bigtree cms
- CVE-2023-4495 Easy Chat Server XSS vulnerability
- CVE-2023-4494 Easy Chat Server Stack-based buffer overflow vulnerability
- CVE-2023-4493 Easy Address Book Web Server Stored XSS vulnerability
- CVE-2023-4492 Easy Address Book Web Server XSS vulnerability
- CVE-2023-44915 A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scrip
- CVE-2023-4491 Easy Address Book Web Server Buffer overflow vulnerability
- CVE-2023-4490 WP Job Portal < 2.0.6 - Unauthenticated SQLi
- CVE-2023-4489 Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key
- CVE-2023-4488 Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion
- CVE-2023-4487 GE Digital CIMPLICITY Process Control
- CVE-2023-44860 Denial of service in netis-systems:n3m firmware
- CVE-2023-4486 Uncontrolled Resource Consumption in Metasys and Facility Explorer
- CVE-2023-44857 Code injection in cobham:sailor 600 vsat ku firmware
- CVE-2023-44856 Cross-site scripting in cobham:sailor 600 vsat ku firmware
- CVE-2023-44855 Cross-site scripting in cobham:sailor 600 vsat ku firmware
- CVE-2023-44854 Cross-site scripting in cobham:sailor 600 vsat ku firmware
- CVE-2023-44853 Code injection in cobham:sailor 600 vsat ku firmware
- CVE-2023-44852 Cross-site scripting in cobham:sailor 600 vsat ku firmware
- CVE-2023-4485 ARDEREG Sistemas SCADA SQL Injection
- CVE-2023-44848 Code injection in seacms:seacms
- CVE-2023-44847 Code injection in seacms:seacms
- CVE-2023-44846 Code injection in seacms:seacms
- CVE-2023-44839 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44838 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44837 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44836 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44835 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44834 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44833 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44832 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44831 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44830 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44829 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44828 Memory corruption in dlink:dir-823g firmware
- CVE-2023-44827 Command injection in easycorp:zentao
- CVE-2023-44826 Cross-site scripting in easycorp:zentao
- CVE-2023-44824 File upload in oretnom23:expense management system
- CVE-2023-44821 Denial of service in lcdf:gifsicle
- CVE-2023-4482 Auto Amazon Links <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via style
- CVE-2023-44813 Cross-site scripting in moosocial:moosocial
- CVE-2023-44812 Cross-site scripting in moosocial:moosocial
- CVE-2023-44811 Cross-site request forgery in moosocial:moosocial
- CVE-2023-4481 Denial of service in Junos OS
- CVE-2023-44809 Privilege escalation in dlink:dir-820l firmware
- CVE-2023-44808 Memory corruption in dlink:dir-820l firmware
- CVE-2023-44807 Memory corruption in dlink:dir-820l firmware
- CVE-2023-4480 Arbitrary File Read in Fusion File Manager
- CVE-2023-44796 Cross-site scripting in limesurvey:limesurvey
- CVE-2023-44794 SaToken privilege escalation vulnerability
- CVE-2023-4479 Stored XSS Vulnerability in M-Files Web
- CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created
- CVE-2023-44771 Zenario CMS Cross-site Scripting vulnerability
- CVE-2023-44770 Zenario CMS Cross-site Scripting vulnerability
- CVE-2023-44769 Zenario CMS Cross-site Scripting vulnerability
- CVE-2023-44767 Cross-site scripting in ritecms:ritecms
- CVE-2023-44766 ConcreteCMS Cross-site Scripting vulnerability
- CVE-2023-44765 ConcreteCMS Cross-site Scripting vulnerability
- CVE-2023-44764 ConcreteCMS Cross-site Scripting vulnerability
- CVE-2023-44763 ConcreteCMS vulnerable to Stored Cross-site Scripting
- CVE-2023-44762 ConcreteCMS Cross-site Scripting vulnerability
- CVE-2023-44761 ConcreteCMS Cross-site Scripting vulnerability