# Vulnerabilities published in 2023


- [CVE-2023-25101](https://insights.sbomify.com/CVE-2023-25101/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25100](https://insights.sbomify.com/CVE-2023-25100/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25099](https://insights.sbomify.com/CVE-2023-25099/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25098](https://insights.sbomify.com/CVE-2023-25098/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25097](https://insights.sbomify.com/CVE-2023-25097/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25096](https://insights.sbomify.com/CVE-2023-25096/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25095](https://insights.sbomify.com/CVE-2023-25095/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25094](https://insights.sbomify.com/CVE-2023-25094/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25093](https://insights.sbomify.com/CVE-2023-25093/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25092](https://insights.sbomify.com/CVE-2023-25092/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25091](https://insights.sbomify.com/CVE-2023-25091/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25090](https://insights.sbomify.com/CVE-2023-25090/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-2509](https://insights.sbomify.com/CVE-2023-2509/): A Cross-Site Scripting(XSS) vulnerability was found on ADM (high 7.1)
- [CVE-2023-25089](https://insights.sbomify.com/CVE-2023-25089/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25088](https://insights.sbomify.com/CVE-2023-25088/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25087](https://insights.sbomify.com/CVE-2023-25087/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25086](https://insights.sbomify.com/CVE-2023-25086/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25085](https://insights.sbomify.com/CVE-2023-25085/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25084](https://insights.sbomify.com/CVE-2023-25084/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25083](https://insights.sbomify.com/CVE-2023-25083/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25082](https://insights.sbomify.com/CVE-2023-25082/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25081](https://insights.sbomify.com/CVE-2023-25081/): Memory corruption in UR32L (high 7.2)
- [CVE-2023-25080](https://insights.sbomify.com/CVE-2023-25080/): Security feature bypass in Intel(R) Distribution of OpenVINO toolkit software (medium 5.3)
- [CVE-2023-2508](https://insights.sbomify.com/CVE-2023-2508/): CSRF in PaperCutNG Mobility Print leads to sophisticated phishing (medium 5.3)
- [CVE-2023-25078](https://insights.sbomify.com/CVE-2023-25078/): DoS due to heap overflow (critical 9.8)
- [CVE-2023-25077](https://insights.sbomify.com/CVE-2023-25077/): Cross-site scripting in EC-CUBE 4 series (medium 5.4)
- [CVE-2023-25076](https://insights.sbomify.com/CVE-2023-25076/): Memory corruption in SNIProxy (critical 9.8)
- [CVE-2023-25075](https://insights.sbomify.com/CVE-2023-25075/): Privilege escalation in Intel Server Configuration Utility software (medium 6.7)
- [CVE-2023-25074](https://insights.sbomify.com/CVE-2023-25074/): Competency access levels not enforced in the server (high 7.1)
- [CVE-2023-25073](https://insights.sbomify.com/CVE-2023-25073/): Missing authorization in Intel(R) DSA software (medium 5.5)
- [CVE-2023-25072](https://insights.sbomify.com/CVE-2023-25072/): Weak cryptography in SkyBridge MB-A100/110 (medium 6.5)
- [CVE-2023-25071](https://insights.sbomify.com/CVE-2023-25071/): Null dereference in Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers (medium 5.6)
- [CVE-2023-25070](https://insights.sbomify.com/CVE-2023-25070/): Information disclosure in SkyBridge MB-A100/110 (medium 4.8)
- [CVE-2023-2507](https://insights.sbomify.com/CVE-2023-2507/): CleverTap Cordova Plugin 2.6.2 - Reflected XSS (critical 9.3)
- [CVE-2023-25069](https://insights.sbomify.com/CVE-2023-25069/): Privilege escalation in TXOne Networks StellarOne (high 8.8)
- [CVE-2023-25068](https://insights.sbomify.com/CVE-2023-25068/): WordPress Magazine Edge theme <= 1.13 - Authenticated Arbitrary Plugin Activation (medium 4.3)
- [CVE-2023-25067](https://insights.sbomify.com/CVE-2023-25067/): WordPress We’re Open! plugin <= 1.45 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2023-25066](https://insights.sbomify.com/CVE-2023-25066/): WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25065](https://insights.sbomify.com/CVE-2023-25065/): WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-25064](https://insights.sbomify.com/CVE-2023-25064/): WordPress WP htpasswd Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25063](https://insights.sbomify.com/CVE-2023-25063/): WordPress Quick Page/Post Redirect Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25062](https://insights.sbomify.com/CVE-2023-25062/): WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25061](https://insights.sbomify.com/CVE-2023-25061/): WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-25060](https://insights.sbomify.com/CVE-2023-25060/): WordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-25059](https://insights.sbomify.com/CVE-2023-25059/): WordPress avalex Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25058](https://insights.sbomify.com/CVE-2023-25058/): WordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25057](https://insights.sbomify.com/CVE-2023-25057/): WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure (medium 5.3)
- [CVE-2023-25056](https://insights.sbomify.com/CVE-2023-25056/): WordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25055](https://insights.sbomify.com/CVE-2023-25055/): WordPress Google XML Sitemap for Videos Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25054](https://insights.sbomify.com/CVE-2023-25054/): WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE) (critical 10.0)
- [CVE-2023-25052](https://insights.sbomify.com/CVE-2023-25052/): WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25051](https://insights.sbomify.com/CVE-2023-25051/): WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25050](https://insights.sbomify.com/CVE-2023-25050/): WordPress Shortcodes Ultimate plugin <= 5.12.6 - Arbitrary File Download vulnerability (high 7.1)
- [CVE-2023-2505](https://insights.sbomify.com/CVE-2023-2505/): Cross-site request forgery in 4K QUAD (high 7.7)
- [CVE-2023-25049](https://insights.sbomify.com/CVE-2023-25049/): WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25048](https://insights.sbomify.com/CVE-2023-25048/): WordPress Fantastic Content Protector Free plugin <= 2.6 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2023-25047](https://insights.sbomify.com/CVE-2023-25047/): WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection (medium 5.5)
- [CVE-2023-25046](https://insights.sbomify.com/CVE-2023-25046/): WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25045](https://insights.sbomify.com/CVE-2023-25045/): WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection (medium 6.7)
- [CVE-2023-25044](https://insights.sbomify.com/CVE-2023-25044/): WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25043](https://insights.sbomify.com/CVE-2023-25043/): WordPress Data Tables Generator by Supsystic Plugin <= 1.10.25 is vulnerable to Broken Access Control (medium 4.3)
- [CVE-2023-25042](https://insights.sbomify.com/CVE-2023-25042/): WordPress oAuth Twitter Feed for Developers Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25041](https://insights.sbomify.com/CVE-2023-25041/): WordPress Monolit Theme <= 2.0.6 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-25040](https://insights.sbomify.com/CVE-2023-25040/): WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2023-2504](https://insights.sbomify.com/CVE-2023-2504/): Hardcoded credentials in 4K QUAD (high 8.4)
- [CVE-2023-25039](https://insights.sbomify.com/CVE-2023-25039/): WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability (medium 4.3)
- [CVE-2023-25038](https://insights.sbomify.com/CVE-2023-25038/): WordPress For the visually impaired Plugin <= 0.58 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25037](https://insights.sbomify.com/CVE-2023-25037/): WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2023-25036](https://insights.sbomify.com/CVE-2023-25036/): WordPress Social Media Icons Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25035](https://insights.sbomify.com/CVE-2023-25035/): WordPress Quick Contact Form plugin <= 8.0.3.1 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2023-25034](https://insights.sbomify.com/CVE-2023-25034/): WordPress WP Clean Up Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25033](https://insights.sbomify.com/CVE-2023-25033/): WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2023-25032](https://insights.sbomify.com/CVE-2023-25032/): WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25031](https://insights.sbomify.com/CVE-2023-25031/): WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25030](https://insights.sbomify.com/CVE-2023-25030/): WordPress Buy Me a Coffee plugin <= 3.7 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2023-2503](https://insights.sbomify.com/CVE-2023-2503/): 10WebSocial < 1.2.9 - Reflected XSS (medium 6.1)
- [CVE-2023-25029](https://insights.sbomify.com/CVE-2023-25029/): WordPress WP Social Bookmarking Light Plugin <= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25028](https://insights.sbomify.com/CVE-2023-25028/): WordPress CC Custom Taxonomy Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25027](https://insights.sbomify.com/CVE-2023-25027/): WordPress Chained Quiz Plugin <= 1.3.2.5 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25026](https://insights.sbomify.com/CVE-2023-25026/): WordPress PayPal Brasil para WooCommerce plugin <= 1.4.2 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2023-25025](https://insights.sbomify.com/CVE-2023-25025/): WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2023-25024](https://insights.sbomify.com/CVE-2023-25024/): WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25023](https://insights.sbomify.com/CVE-2023-25023/): WordPress WebinarIgnition Plugin <= 2.14.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25022](https://insights.sbomify.com/CVE-2023-25022/): WordPress Watu Quiz Plugin <= 3.3.8 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25021](https://insights.sbomify.com/CVE-2023-25021/): WordPress FareHarbor for WordPress Plugin <= 3.6.6 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2023-25020](https://insights.sbomify.com/CVE-2023-25020/): WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-25019](https://insights.sbomify.com/CVE-2023-25019/): WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2023-25018](https://insights.sbomify.com/CVE-2023-25018/): Rifartek IOT Wall - Reflected XSS (medium 5.4)
- [CVE-2023-25017](https://insights.sbomify.com/CVE-2023-25017/): Rifartek IOT Wall - Broken Access Control (high 8.1)
- [CVE-2023-25016](https://insights.sbomify.com/CVE-2023-25016/): Information disclosure in couchbase:couchbase server (high 7.5)
- [CVE-2023-25015](https://insights.sbomify.com/CVE-2023-25015/): Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2 (medium 6.5)
- [CVE-2023-25014](https://insights.sbomify.com/CVE-2023-25014/): Broken Access Control in 3rd party TYPO3 extension "femanager" (high 8.6)
- [CVE-2023-25013](https://insights.sbomify.com/CVE-2023-25013/): Broken Access Control in 3rd party TYPO3 extension "femanager" (high 8.6)
- [CVE-2023-25012](https://insights.sbomify.com/CVE-2023-25012/): Use after free in linux:linux kernel (medium 4.6)
- [CVE-2023-25011](https://insights.sbomify.com/CVE-2023-25011/): Privilege escalation in PC settings tool (high 7.8)
- [CVE-2023-25010](https://insights.sbomify.com/CVE-2023-25010/): Memory corruption in Autodesk Maya USD Plugin (high 7.8)
- [CVE-2023-25009](https://insights.sbomify.com/CVE-2023-25009/): Memory corruption in Autodesk 3ds Max USD Plugin (high 7.8)
- [CVE-2023-25008](https://insights.sbomify.com/CVE-2023-25008/): Memory corruption in Autodesk 3ds Max USD Plugin (high 7.8)
- [CVE-2023-25007](https://insights.sbomify.com/CVE-2023-25007/): Memory corruption in Autodesk 3ds Max USD Plugin (high 7.8)
- [CVE-2023-25006](https://insights.sbomify.com/CVE-2023-25006/): Use after free in Autodesk 3ds Max USD Plugin (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/368/