2023 CVEs (page 21)
Page 21 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47689 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animat… |
CVE-2023-47661 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in Dragfy Dragfy Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-47648 | High | 7.5 | 2025-01-02 | Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-47647 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in LearningTimes BadgeOS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BadgeOS… |
CVE-2023-47557 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configu… |
CVE-2023-47523 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Ecreate Infotech Auto Tag Creator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-47515 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Seers Seers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a t… |
CVE-2023-47241 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Acces… |
CVE-2023-47225 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-47224 | High | 7.5 | 2025-01-02 | Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-47188 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2023-47187 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-47183 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP… |
CVE-2023-47180 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale… |
CVE-2023-47179 | High | 8.8 | 2025-01-02 | Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-46644 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in WP CTA PRO WordPress CTA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Word… |
CVE-2023-46639 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk… |
CVE-2023-46637 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-46635 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Acce… |
CVE-2023-46633 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Glossary… |
CVE-2023-46632 | High | 7.1 | 2025-01-02 | Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My… |
CVE-2023-46631 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in RevenueHunt Product Recommendation Quiz for eCommerce product-recommendation-quiz-for-ecommerce allows Exploiting Incorr… |
CVE-2023-46628 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-46616 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in NSquared Draw Attention allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Draw… |
CVE-2023-46612 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in codedraft Mediabay mediabay-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-46611 | Medium | 5.3 | 2025-01-02 | Authentication Bypass by Primary Weakness vulnerability in yourownprogrammer YOP Poll allows Authentication Bypass.This issue affects YOP Poll: from n/a throug… |
CVE-2023-46610 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-46609 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in FeedFocal FeedFocal feedfocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-46608 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in WPDO DoLogin Security dologin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-46607 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-46606 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-46605 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-46309 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-46206 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-46203 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in JustCoded / Alex Prokopenko Just Custom Fields allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-46196 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrec… |
CVE-2023-46195 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-46188 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access… |
CVE-2023-46083 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-46082 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder broken-link-finder allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-46080 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-46079 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extr… |
CVE-2023-46073 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-45828 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access… |
CVE-2023-45766 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-45765 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: fro… |
CVE-2023-45760 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-45649 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in codepeople Appointment Hour Booking appointment-hour-booking allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2023-45636 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-45631 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-45275 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-45271 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-45110 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-45104 | High | 7.3 | 2025-01-02 | Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-45101 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce customer-reviews-woocommerce allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-45061 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-45045 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in krozero WP Custom Widget area wp-custom-widget-area allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-45002 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Us… |
CVE-2023-44988 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-44258 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Acc… |
CVE-2023-6603 | High | 7.5 | 2024-12-31 | A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null po… |
CVE-2023-6602 | Medium | 5.3 | 2024-12-31 | A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS pla… |
CVE-2023-50850 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-48775 | Medium | 5.3 | 2024-12-31 | Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clean… |
CVE-2023-52718 | Medium | 6.4 | 2024-12-28 | A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vu… |
CVE-2023-7266 | High | 7.5 | 2024-12-28 | Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnera… |
CVE-2023-7263 | High | 7.3 | 2024-12-28 | Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion… |
CVE-2023-7300 | High | 8.0 | 2024-12-26 | Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the f… |
CVE-2023-5117 | Low | 3.7 | 2024-12-25 | An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues… |
CVE-2023-31280 | Medium | 5.3 | 2024-12-21 | An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage… |
CVE-2023-31279 | High | 8.1 | 2024-12-21 | The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has no… |
CVE-2023-42867 | High | 7.8 | 2024-12-20 | This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain… |
CVE-2023-7005 | High | 7.5 | 2024-12-19 | A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the… |
CVE-2023-4617 | Critical | 10.0 | 2024-12-19 | Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other… |
CVE-2023-30443 | Medium | 5.3 | 2024-12-19 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. |
CVE-2023-23357 | Medium | 4.8 | 2024-12-19 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo… |
CVE-2023-23356 | Medium | 5.5 | 2024-12-19 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attack… |
CVE-2023-23354 | High | 7.3 | 2024-12-19 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remo… |
CVE-2023-21586 | Medium | 5.5 | 2024-12-19 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference… |
CVE-2023-50956 | Medium | 4.4 | 2024-12-18 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that… |
CVE-2023-34990 | Critical | 9.8 | 2024-12-18 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via… |
CVE-2023-37940 | Medium | 4.8 | 2024-12-17 | Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update… |
CVE-2023-29476 | Critical | 9.1 | 2024-12-14 | In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests. This is fixed in 2.8… |
CVE-2023-44149 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-44147 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-44142 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Deepen Bajracharya Inactive Logout inactive-logout allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-41952 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-41951 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-41875 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-41873 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-41870 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cr… |
CVE-2023-41869 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-41866 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-41865 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro… |
CVE-2023-41862 | Medium | 5.3 | 2024-12-13 | Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0. |
CVE-2023-41857 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in ClickToTweet.com Click To Tweet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-41849 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-41848 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects C… |
CVE-2023-41803 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-41802 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |