Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 378 of 430.
- CVE-2023-23883 Cross-site scripting in WP Content Filter
- CVE-2023-23882 WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control
- CVE-2023-23881 WordPress Circles Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23880 WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2388 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23879 WordPress PHP Execution Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23878 WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23877 WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23876 WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23875 WordPress Bing Site Verification plugin using Meta Tag Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23874 WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23873 WordPress BBSpoiler Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23872 WordPress GMAce plugin <= 1.5.2 - Arbitrary File Download vulnerability
- CVE-2023-23871 WordPress Button Plugin <= 1.1.23 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23870 WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2387 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23869 WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23868 WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability
- CVE-2023-23867 WordPress Button Builder – Buttons X Plugin <= 0.8.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23866 WordPress Interactive Geo Maps Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23865 Cross-site request forgery in Stripe Payments For WooCommerce by Checkout Plugins
- CVE-2023-23864 WordPress Very Simple Google Maps Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23863 Cross-site scripting in TreePress – Easy Family Trees & Ancestor Profiles
- CVE-2023-23862 WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23861 WordPress GMAce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23860 Open redirect in NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-2386 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23859 Cross-site scripting in NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-23858 Cross-site scripting in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-23857 Improper Access Control in SAP NetWeaver AS for Java
- CVE-2023-23856 Cross-site scripting in SAP BusinessObjects Business Intelligence (Web Intelligence UI)
- CVE-2023-23855 Open redirect in Solution Manager
- CVE-2023-23854 Missing authorization in NetWeaver AS ABAP and ABAP Platform
- CVE-2023-23853 Open redirect in NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2023-23852 Cross-site scripting in Solution Manager
- CVE-2023-23851 File upload in Business Planning and Consolidation
- CVE-2023-23850 Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions
- CVE-2023-2385 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23849 Cross-site scripting in Coverity
- CVE-2023-23848 CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
- CVE-2023-23847 CSRF vulnerability in Synopsys Jenkins Coverity Plugin
- CVE-2023-23846 Denial of service in Open5GS
- CVE-2023-23845 SolarWinds Platform Exposed Dangerous Method Vulnerability
- CVE-2023-23844 SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability
- CVE-2023-23843 SolarWinds Platform Incorrect Comparison Vulnerability
- CVE-2023-23842 SolarWinds Network Configuration Manager Directory Traversal Vulnerability
- CVE-2023-23841 SolarWinds Serv-U Exposure of Sensitive Information Vulnerability
- CVE-2023-23840 SolarWinds Platform Exposed Dangerous Method Vulnerability
- CVE-2023-2384 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23839 SolarWinds Platform Exposure of Sensitive Information Vulnerability
- CVE-2023-23838 Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1
- CVE-2023-23837 No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1
- CVE-2023-23836 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2023-23835 Security feature bypass in Mendix Applications using Mendix 7
- CVE-2023-23834 Missing authorization in Spectra
- CVE-2023-23833 WordPress Drop Shadow Boxes Plugin <= 1.7.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23832 WordPress Ultimate WP Query Search Filter Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23831 WordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23830 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2383 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23829 WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23828 WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23827 WordPress Google Maps v3 Shortcode Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23826 WordPress Add Posts to Pages Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23825 Missing authorization in Spectra
- CVE-2023-23824 WordPress WP TopBar Plugin <= 5.36 is vulnerable to SQL Injection
- CVE-2023-23823 WordPress Enhanced Text Widget plugin <= 1.5.8 - Broken Access Control vulnerability
- CVE-2023-23822 WordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23821 WordPress Interactive Polish Map Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23820 WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2382 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23819 WordPress itemprop WP for SERP/SEO Rich snippets Plugin <= 3.5.201706131 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23818 WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23817 WordPress Simple PDF Viewer Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23816 WordPress Sitemap Index Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23815 WordPress Multi-column Tag Map Plugin <= 17.0.24 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23814 WordPress Calendar Event Multi View plugin <= 1.4.13 - Broken Access Control vulnerability
- CVE-2023-23813 WordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23812 WordPress Enhanced WP Contact Form Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23811 WordPress Smoothscroller Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23810 WordPress Panorama – WordPress Project Management Plugin Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2381 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23809 WordPress Stock market charts from finviz Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23808 WordPress Sponsors Carousel Plugin <= 4.02 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23807 WordPress MojoPlug Slide Panel Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23806 WordPress WordPress Custom Settings Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23804 WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23803 WordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23802 WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23801 WordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23800 WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2023-2380 Netgear SRX5308 denial of service
- CVE-2023-23799 WordPress Easy Panorama Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23798 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23797 WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23796 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection
- CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23794 WordPress Semalt Blocker Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23793 WordPress Read More Without Refresh Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23792 Cross-site request forgery in Swatchly