2023 CVEs (page 21)
Page 21 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45110 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-45104 | High | 7.3 | 2025-01-02 | Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-45101 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce customer-reviews-woocommerce allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-45061 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-45045 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in krozero WP Custom Widget area wp-custom-widget-area allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-45002 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Us… |
CVE-2023-44988 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-44258 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Acc… |
CVE-2023-6603 | High | 7.5 | 2024-12-31 | A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null po… |
CVE-2023-6602 | Medium | 5.3 | 2024-12-31 | A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS pla… |
CVE-2023-50850 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-48775 | Medium | 5.3 | 2024-12-31 | Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clean… |
CVE-2023-52718 | Medium | 6.4 | 2024-12-28 | A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vu… |
CVE-2023-7266 | High | 7.5 | 2024-12-28 | Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnera… |
CVE-2023-7263 | High | 7.3 | 2024-12-28 | Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion… |
CVE-2023-7300 | High | 8.0 | 2024-12-26 | Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the f… |
CVE-2023-5117 | Low | 3.7 | 2024-12-25 | An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues… |
CVE-2023-31280 | Medium | 5.3 | 2024-12-21 | An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage… |
CVE-2023-31279 | High | 8.1 | 2024-12-21 | The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has no… |
CVE-2023-42867 | High | 7.8 | 2024-12-20 | This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain… |
CVE-2023-7005 | High | 7.5 | 2024-12-19 | A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the… |
CVE-2023-4617 | Critical | 10.0 | 2024-12-19 | Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other… |
CVE-2023-30443 | Medium | 5.3 | 2024-12-19 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. |
CVE-2023-23357 | Medium | 4.8 | 2024-12-19 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo… |
CVE-2023-23356 | Medium | 5.5 | 2024-12-19 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attack… |
CVE-2023-23354 | High | 7.3 | 2024-12-19 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo… |
CVE-2023-21586 | Medium | 5.5 | 2024-12-19 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference… |
CVE-2023-50956 | Medium | 4.4 | 2024-12-18 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that… |
CVE-2023-34990 | Critical | 9.8 | 2024-12-18 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via… |
CVE-2023-37940 | Medium | 4.8 | 2024-12-17 | Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update… |
CVE-2023-29476 | Critical | 9.1 | 2024-12-14 | In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests. This is fixed in 2.8… |
CVE-2023-44149 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-44147 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-44142 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Deepen Bajracharya Inactive Logout inactive-logout allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-41952 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-41951 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-41875 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-41873 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-41870 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cr… |
CVE-2023-41869 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-41866 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-41865 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro… |
CVE-2023-41862 | Medium | 5.3 | 2024-12-13 | Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0. |
CVE-2023-41857 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in ClickToTweet.com Click To Tweet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-41849 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-41848 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects C… |
CVE-2023-41803 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-41802 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-41695 | Low | 3.5 | 2024-12-13 | Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-41690 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-41689 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-41688 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-41686 | Medium | 6.5 | 2024-12-13 | Cross-Site Request Forgery (CSRF) vulnerability in ilGhera Woocommerce Support System allows Cross Site Request Forgery.This issue affects Woocommerce Support… |
CVE-2023-41683 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Pechenki TelSender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TelSender… |
CVE-2023-41671 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart allows Exploiting Incorrectly Configured A… |
CVE-2023-41664 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-41649 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-41133 | Medium | 5.3 | 2024-12-13 | Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionality Bypass.This issue affects Secure Admin IP: from n/a throug… |
CVE-2023-41132 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-41130 | High | 8.1 | 2024-12-13 | Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-40678 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Andrew Fiebert Simple URLs simple-urls allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-40670 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX… |
CVE-2023-40334 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-40331 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acco… |
CVE-2023-40213 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-40203 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-40011 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-40005 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-40003 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in weDevs WP Project Manager wedevs-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-40001 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in SolidWP iThemes Sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iThemes… |
CVE-2023-39997 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-39996 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Contro… |
CVE-2023-39995 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-39920 | High | 7.5 | 2024-12-13 | Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 wpcf7-redirect allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-39305 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-38514 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2023-38483 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects In… |
CVE-2023-38480 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-38479 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Codents Simple Googlebot Visit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-38477 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-38475 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-38385 | High | 8.3 | 2024-12-13 | Missing Authorization vulnerability in Artbees JupiterX Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jupiter… |
CVE-2023-38383 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Langu… |
CVE-2023-37989 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Easyship Easyship WooCommerce Shipping Rates allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-37987 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-37984 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-37971 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-37969 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in The African Boss Checkout with Zelle on Woocommerce allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-37967 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-37887 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in WPSchoolPress Team WPSchoolPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-36681 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-36680 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Iulia Cazan Image Regenerate & Select Crop allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-36531 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-36528 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk… |
CVE-2023-36526 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Inqsys Technology Duplicate Post Page Menu & Custom Post Type allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2023-36519 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in wpthemego SW Product Bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-36518 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-36510 | High | 7.3 | 2024-12-13 | Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2023-36509 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-36506 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |