Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 379 of 430.
- CVE-2023-23791 WordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23790 WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-2379 Ubiquiti EdgeRouter X Web Service denial of service
- CVE-2023-23789 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23788 WordPress Custom More Link Complete Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23787 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23786 WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23785 WordPress Exquisite PayPal Donation Plugin <= v2.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23784 Path traversal in FortiWeb
- CVE-2023-23783 Memory corruption in FortiWeb
- CVE-2023-23782 Memory corruption in FortiWeb
- CVE-2023-23781 Memory corruption in FortiWeb
- CVE-2023-23780 Memory corruption in FortiWeb
- CVE-2023-2378 Ubiquiti EdgeRouter X Web Management command injection
- CVE-2023-23779 Command injection in FortiWeb
- CVE-2023-23778 Path traversal in FortiWeb
- CVE-2023-23777 Command injection in FortiWeb
- CVE-2023-23776 Information disclosure in FortiAnalyzer
- CVE-2023-23775 SQL injection in FortiSOAR
- CVE-2023-23774 Other in EBTS/MBTS Base Radio
- CVE-2023-23773 Security feature bypass in EBTS/MBTS Base Radio
- CVE-2023-23772 Security feature bypass in MBTS Site Controller
- CVE-2023-23771 Hardcoded credentials in MBTS Base Radio
- CVE-2023-23770 Hardcoded credentials in MBTS Site Controller
- CVE-2023-2377 Ubiquiti EdgeRouter X Web Management command injection
- CVE-2023-23766 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23765 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23764 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23763 Information disclosure in GitHub Enterprise Server leading to private repository leakage
- CVE-2023-23762 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
- CVE-2023-23761 Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists
- CVE-2023-23760 Path traversal in GitHub Enterprise Server leading to remote code execution
- CVE-2023-2376 Ubiquiti EdgeRouter X Web Management command injection
- CVE-2023-23759 Denial of service in fizz
- CVE-2023-23758 Extension - creative-solutions.net - SQLi in Creative Gallery component for Joomla <= 2.2.0
- CVE-2023-23757 Extension - bestaddon.com - SQLi in BA Gallery component for Joomla <= 1.2.0
- CVE-2023-23756 Extension - advcomsys.com - XSS in oneVote component for Joomla <= 1.7.0
- CVE-2023-23755 [20230502] - Core - Bruteforce prevention within the mfa screen
- CVE-2023-23754 [20230501] - Core - Open Redirect and XSS within the mfa select
- CVE-2023-23753 Extension - vi-solutions - Visforms Base Package for Joomla 3
- CVE-2023-23752 Joomla! Improper Access Control
- CVE-2023-23751 [20230102] - Core - Missing ACL checks for com_actionlogs
- CVE-2023-23750 [20230101] - Core - CSRF within post-installation messages
- CVE-2023-2375 Ubiquiti EdgeRouter X Web Management command injection
- CVE-2023-23749 Extension - miniorange - LDAP Integration - LDAP Injection (username)
- CVE-2023-2374 Ubiquiti EdgeRouter X Web Management command injection
- CVE-2023-23738 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability
- CVE-2023-23737 WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection
- CVE-2023-23735 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection Vulnerability
- CVE-2023-23734 WordPress Userlike – WordPress Live Chat plugin Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23733 WordPress Lazy Social Comments Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23732 WordPress Disqus Conditional Load Plugin <= 11.0.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23731 WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23730 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass Vulnerability
- CVE-2023-2373 Ubiquiti EdgeRouter X Web Management command injection
- CVE-2023-23729 WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability
- CVE-2023-23728 WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23727 Cross-site scripting in Live Chat by Formilla
- CVE-2023-23726 WordPress Tickera – WordPress Event Ticketing plugin <= 3.5.1.0 - CSRF Leading To Post Status Change Vulnerability
- CVE-2023-23725 WordPress Shortcodes by Angie Makes plugin <= 3.46 - Broken Access Control vulnerability
- CVE-2023-23724 Cross-site request forgery in WP Email Capture
- CVE-2023-23723 Cross-site scripting in WP Email Capture
- CVE-2023-23722 WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23721 WordPress Admin Log Plugin <= 1.50 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23720 WordPress Verified Reviews (Avis Vérifiés) Plugin <= 2.3.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2372 SourceCodester Online DJ Management System cross site scripting
- CVE-2023-23719 WordPress Premmerce Plugin <= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23718 WordPress Page Loading Effects Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23717 WordPress Portfolio Slideshow Plugin <= 1.13.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23716 WordPress Zendesk Support for WordPress plugin <= 1.8.4 - Broken Access Control vulnerability
- CVE-2023-23715 WordPress JobBoardWP – Job Board Listings and Submissions plugin <= 1.2.2 - IDOR Leading To Job Removal Vulnerability
- CVE-2023-23714 WordPress Uncanny Toolkit for LearnDash Plugin <= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23713 WordPress Theme Tweaker Plugin <= 5.20 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23712 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23711 WordPress A2 Optimized WP Plugin <= 3.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23710 Cross-site scripting in WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)
- CVE-2023-2371 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection
- CVE-2023-23709 WordPress WPJAM Basic Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23708 WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23707 Cross-site scripting in Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
- CVE-2023-23706 Cross-site request forgery in WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)
- CVE-2023-23705 WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23704 WordPress Comments Ratings Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23703 WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23702 WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23701 WordPress Easy Sign Up Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23700 WordPress OceanWP theme <= 3.4.1 - Authenticated Local File Inclusion vulnerability
- CVE-2023-2370 SourceCodester Online DJ Management System GET Parameter manage_event.php sql injection
- CVE-2023-23699 WordPress Progress Bar Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23698 Other in Dell Command Update (DCU)
- CVE-2023-23697 Path traversal in Dell Command Update (DCU)
- CVE-2023-23696 Missing authorization in Dell Command Intel vPro Out of Band (DCIV)
- CVE-2023-23695 Weak cryptography in Secure Connect Gateway (SCG) 5.0 Appliance - SRS
- CVE-2023-23694 Command injection in Dell VxRail HCI
- CVE-2023-23693 Command injection in Dell VxRail HCI
- CVE-2023-23692 Command injection in Data Domain
- CVE-2023-23691 Other in Dell PowerVault ME5
- CVE-2023-23690 Security feature bypass in Cloud Mobility for Dell Storage
- CVE-2023-2369 SourceCodester Faculty Evaluation System manage_restriction.php sql injection
- CVE-2023-23689 Denial of service in PowerScale OneFS