# Vulnerabilities published in 2023 - [CVE-2023-23883](https://insights.sbomify.com/CVE-2023-23883/): Cross-site scripting in WP Content Filter (medium 5.9) - [CVE-2023-23882](https://insights.sbomify.com/CVE-2023-23882/): WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control (medium 4.3) - [CVE-2023-23881](https://insights.sbomify.com/CVE-2023-23881/): WordPress Circles Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23880](https://insights.sbomify.com/CVE-2023-23880/): WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-2388](https://insights.sbomify.com/CVE-2023-2388/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23879](https://insights.sbomify.com/CVE-2023-23879/): WordPress PHP Execution Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-23878](https://insights.sbomify.com/CVE-2023-23878/): WordPress WP Google Map Plugin Plugin <= 4.3.9 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23877](https://insights.sbomify.com/CVE-2023-23877/): WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23876](https://insights.sbomify.com/CVE-2023-23876/): WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23875](https://insights.sbomify.com/CVE-2023-23875/): WordPress Bing Site Verification plugin using Meta Tag Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23874](https://insights.sbomify.com/CVE-2023-23874/): WordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23873](https://insights.sbomify.com/CVE-2023-23873/): WordPress BBSpoiler Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23872](https://insights.sbomify.com/CVE-2023-23872/): WordPress GMAce plugin <= 1.5.2 - Arbitrary File Download vulnerability (medium 4.9) - [CVE-2023-23871](https://insights.sbomify.com/CVE-2023-23871/): WordPress Button Plugin <= 1.1.23 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23870](https://insights.sbomify.com/CVE-2023-23870/): WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-2387](https://insights.sbomify.com/CVE-2023-2387/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23869](https://insights.sbomify.com/CVE-2023-23869/): WordPress Google XML Sitemap for Mobile Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-23868](https://insights.sbomify.com/CVE-2023-23868/): WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability (medium 5.4) - [CVE-2023-23867](https://insights.sbomify.com/CVE-2023-23867/): WordPress Button Builder – Buttons X Plugin <= 0.8.6 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23866](https://insights.sbomify.com/CVE-2023-23866/): WordPress Interactive Geo Maps Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23865](https://insights.sbomify.com/CVE-2023-23865/): Cross-site request forgery in Stripe Payments For WooCommerce by Checkout Plugins (medium 4.3) - [CVE-2023-23864](https://insights.sbomify.com/CVE-2023-23864/): WordPress Very Simple Google Maps Plugin <= 2.8.4 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23863](https://insights.sbomify.com/CVE-2023-23863/): Cross-site scripting in TreePress – Easy Family Trees & Ancestor Profiles (medium 5.9) - [CVE-2023-23862](https://insights.sbomify.com/CVE-2023-23862/): WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23861](https://insights.sbomify.com/CVE-2023-23861/): WordPress GMAce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4) - [CVE-2023-23860](https://insights.sbomify.com/CVE-2023-23860/): Open redirect in NetWeaver AS for ABAP and ABAP Platform (medium 6.1) - [CVE-2023-2386](https://insights.sbomify.com/CVE-2023-2386/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23859](https://insights.sbomify.com/CVE-2023-23859/): Cross-site scripting in NetWeaver AS for ABAP and ABAP Platform (medium 6.1) - [CVE-2023-23858](https://insights.sbomify.com/CVE-2023-23858/): Cross-site scripting in SAP NetWeaver AS for ABAP and ABAP Platform (medium 6.1) - [CVE-2023-23857](https://insights.sbomify.com/CVE-2023-23857/): Improper Access Control in SAP NetWeaver AS for Java (critical 9.9) - [CVE-2023-23856](https://insights.sbomify.com/CVE-2023-23856/): Cross-site scripting in SAP BusinessObjects Business Intelligence (Web Intelligence UI) (medium 4.3) - [CVE-2023-23855](https://insights.sbomify.com/CVE-2023-23855/): Open redirect in Solution Manager (medium 6.5) - [CVE-2023-23854](https://insights.sbomify.com/CVE-2023-23854/): Missing authorization in NetWeaver AS ABAP and ABAP Platform (low 3.8) - [CVE-2023-23853](https://insights.sbomify.com/CVE-2023-23853/): Open redirect in NetWeaver Application Server for ABAP and ABAP Platform (medium 6.1) - [CVE-2023-23852](https://insights.sbomify.com/CVE-2023-23852/): Cross-site scripting in Solution Manager (medium 6.1) - [CVE-2023-23851](https://insights.sbomify.com/CVE-2023-23851/): File upload in Business Planning and Consolidation (medium 5.4) - [CVE-2023-23850](https://insights.sbomify.com/CVE-2023-23850/): Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions (medium 4.3) - [CVE-2023-2385](https://insights.sbomify.com/CVE-2023-2385/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23849](https://insights.sbomify.com/CVE-2023-23849/): Cross-site scripting in Coverity (high 8.1) - [CVE-2023-23848](https://insights.sbomify.com/CVE-2023-23848/): CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials (medium 4.3) - [CVE-2023-23847](https://insights.sbomify.com/CVE-2023-23847/): CSRF vulnerability in Synopsys Jenkins Coverity Plugin (low 3.5) - [CVE-2023-23846](https://insights.sbomify.com/CVE-2023-23846/): Denial of service in Open5GS (high 7.5) - [CVE-2023-23845](https://insights.sbomify.com/CVE-2023-23845/): SolarWinds Platform Exposed Dangerous Method Vulnerability (medium 6.8) - [CVE-2023-23844](https://insights.sbomify.com/CVE-2023-23844/): SolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability (high 7.2) - [CVE-2023-23843](https://insights.sbomify.com/CVE-2023-23843/): SolarWinds Platform Incorrect Comparison Vulnerability (high 7.2) - [CVE-2023-23842](https://insights.sbomify.com/CVE-2023-23842/): SolarWinds Network Configuration Manager Directory Traversal Vulnerability (high 7.2) - [CVE-2023-23841](https://insights.sbomify.com/CVE-2023-23841/): SolarWinds Serv-U Exposure of Sensitive Information Vulnerability (high 7.5) - [CVE-2023-23840](https://insights.sbomify.com/CVE-2023-23840/): SolarWinds Platform Exposed Dangerous Method Vulnerability (medium 6.8) - [CVE-2023-2384](https://insights.sbomify.com/CVE-2023-2384/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23839](https://insights.sbomify.com/CVE-2023-23839/): SolarWinds Platform Exposure of Sensitive Information Vulnerability (medium 6.5) - [CVE-2023-23838](https://insights.sbomify.com/CVE-2023-23838/): Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1 (medium 6.5) - [CVE-2023-23837](https://insights.sbomify.com/CVE-2023-23837/): No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1 (high 7.5) - [CVE-2023-23836](https://insights.sbomify.com/CVE-2023-23836/): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (high 7.2) - [CVE-2023-23835](https://insights.sbomify.com/CVE-2023-23835/): Security feature bypass in Mendix Applications using Mendix 7 (medium 5.9) - [CVE-2023-23834](https://insights.sbomify.com/CVE-2023-23834/): Missing authorization in Spectra (medium 4.3) - [CVE-2023-23833](https://insights.sbomify.com/CVE-2023-23833/): WordPress Drop Shadow Boxes Plugin <= 1.7.10 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23832](https://insights.sbomify.com/CVE-2023-23832/): WordPress Ultimate WP Query Search Filter Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23831](https://insights.sbomify.com/CVE-2023-23831/): WordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23830](https://insights.sbomify.com/CVE-2023-23830/): WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) (high 7.1) - [CVE-2023-2383](https://insights.sbomify.com/CVE-2023-2383/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23829](https://insights.sbomify.com/CVE-2023-23829/): WordPress Owl Carousel Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23828](https://insights.sbomify.com/CVE-2023-23828/): WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23827](https://insights.sbomify.com/CVE-2023-23827/): WordPress Google Maps v3 Shortcode Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23826](https://insights.sbomify.com/CVE-2023-23826/): WordPress Add Posts to Pages Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23825](https://insights.sbomify.com/CVE-2023-23825/): Missing authorization in Spectra (low 3.1) - [CVE-2023-23824](https://insights.sbomify.com/CVE-2023-23824/): WordPress WP TopBar Plugin <= 5.36 is vulnerable to SQL Injection (medium 6.7) - [CVE-2023-23823](https://insights.sbomify.com/CVE-2023-23823/): WordPress Enhanced Text Widget plugin <= 1.5.8 - Broken Access Control vulnerability (medium 4.3) - [CVE-2023-23822](https://insights.sbomify.com/CVE-2023-23822/): WordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23821](https://insights.sbomify.com/CVE-2023-23821/): WordPress Interactive Polish Map Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23820](https://insights.sbomify.com/CVE-2023-23820/): WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-2382](https://insights.sbomify.com/CVE-2023-2382/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23819](https://insights.sbomify.com/CVE-2023-23819/): WordPress itemprop WP for SERP/SEO Rich snippets Plugin <= 3.5.201706131 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23818](https://insights.sbomify.com/CVE-2023-23818/): WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23817](https://insights.sbomify.com/CVE-2023-23817/): WordPress Simple PDF Viewer Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23816](https://insights.sbomify.com/CVE-2023-23816/): WordPress Sitemap Index Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23815](https://insights.sbomify.com/CVE-2023-23815/): WordPress Multi-column Tag Map Plugin <= 17.0.24 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23814](https://insights.sbomify.com/CVE-2023-23814/): WordPress Calendar Event Multi View plugin <= 1.4.13 - Broken Access Control vulnerability (low 3.8) - [CVE-2023-23813](https://insights.sbomify.com/CVE-2023-23813/): WordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4) - [CVE-2023-23812](https://insights.sbomify.com/CVE-2023-23812/): WordPress Enhanced WP Contact Form Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23811](https://insights.sbomify.com/CVE-2023-23811/): WordPress Smoothscroller Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23810](https://insights.sbomify.com/CVE-2023-23810/): WordPress Panorama – WordPress Project Management Plugin Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-2381](https://insights.sbomify.com/CVE-2023-2381/): Netgear SRX5308 Web Management Interface cross site scripting (low 2.4) - [CVE-2023-23809](https://insights.sbomify.com/CVE-2023-23809/): WordPress Stock market charts from finviz Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23808](https://insights.sbomify.com/CVE-2023-23808/): WordPress Sponsors Carousel Plugin <= 4.02 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23807](https://insights.sbomify.com/CVE-2023-23807/): WordPress MojoPlug Slide Panel Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23806](https://insights.sbomify.com/CVE-2023-23806/): WordPress WordPress Custom Settings Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23804](https://insights.sbomify.com/CVE-2023-23804/): WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-23803](https://insights.sbomify.com/CVE-2023-23803/): WordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-23802](https://insights.sbomify.com/CVE-2023-23802/): WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-23801](https://insights.sbomify.com/CVE-2023-23801/): WordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3) - [CVE-2023-23800](https://insights.sbomify.com/CVE-2023-23800/): WordPress Shortcodes Ultimate Plugin <= 5.12.6 is vulnerable to Server Side Request Forgery (SSRF) (high 7.1) - [CVE-2023-2380](https://insights.sbomify.com/CVE-2023-2380/): Netgear SRX5308 denial of service (medium 6.5) - [CVE-2023-23799](https://insights.sbomify.com/CVE-2023-23799/): WordPress Easy Panorama Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23798](https://insights.sbomify.com/CVE-2023-23798/): WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS) (medium 6.5) - [CVE-2023-23797](https://insights.sbomify.com/CVE-2023-23797/): WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4) - [CVE-2023-23796](https://insights.sbomify.com/CVE-2023-23796/): WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection (medium 4.7) - [CVE-2023-23795](https://insights.sbomify.com/CVE-2023-23795/): WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF) (high 7.1) - [CVE-2023-23794](https://insights.sbomify.com/CVE-2023-23794/): WordPress Semalt Blocker Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23793](https://insights.sbomify.com/CVE-2023-23793/): WordPress Read More Without Refresh Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS) (medium 5.9) - [CVE-2023-23792](https://insights.sbomify.com/CVE-2023-23792/): Cross-site request forgery in Swatchly (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/378/